CVE-2007-0735

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-24 · updated 2026-06-16

Description

Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory.

Affected products

macOS: 10.3.9, 10.4, 10.4.1, 10.4.2, 10.4.3, 10.4.4 (+5)
Apple Mac Os X Server: 10.3.9, 10.4, 10.4.1, 10.4.2, 10.4.3, 10.4.4 (+5)

References

http://docs.info.apple.com/article.html?artnum=305391
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
http://secunia.com/advisories/24966
http://www.osvdb.org/34860
http://www.securityfocus.com/bid/23569
http://www.securitytracker.com/id?1017942
http://www.us-cert.gov/cas/techalerts/TA07-109A.html
http://www.vupen.com/english/advisories/2007/1470
http://docs.info.apple.com/article.html?artnum=305391
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
http://secunia.com/advisories/24966
http://www.osvdb.org/34860

Get alerted when CVE-2007-0735 or the next vulnerability affects your stack