CVE-2007-0267

The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by mounting a crafted UNIX File System (UFS) DMG image that contains a corrupted directory entry (struct direct), related to the ufs_dirbad function. NOTE: a third party states that the FreeBSD issue does not cross privilege boundaries.

CVSS v2.0

6.6 MEDIUMAV:L/AC:L/Au:N/C:N/I:C/A:C

EPSS

0.95% chance of exploitation in the next 30 days, 59th percentile

Published

2007-01-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29452

References

• CVE Record
• NVD entry

Related

• CVE-2007-0264
• CVE-2007-0297
• CVE-2007-0262
• CVE-2007-0298
• CVE-2007-0261
• CVE-2007-0300