Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) opt…

Exploit prediction (EPSS)

1.64% probability of exploitation in the next 30 days, higher than 76% of all scored CVEs.

Exploits and detections

• EDB-4759 Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow · local · 2007-12-19

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• vupen.com /english/advisories/2007/4238 · vdb-entry, x_refsource_VUPEN, x_transferred
• labs.idefense.com /intelligence/vulnerabilities/display.php?id=633 · third-party-advisory, x_refsource_IDEFENSE, x_transferred
• us-cert.gov /cas/techalerts/TA07-352A.html · third-party-advisory, x_refsource_CERT, x_transferred
• secunia.com /advisories/28136 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/39109 · vdb-entry, x_refsource_XF, x_transferred
• securityfocus.com /bid/26910 · vdb-entry, x_refsource_BID, x_transferred
• securityfocus.com /bid/26926 · vdb-entry, x_refsource_BID, x_transferred
• securitytracker.com /id?1019106 · vdb-entry, x_refsource_SECTRACK, x_transferred
• lists.apple.com /archives/security-announce/2007/Dec/msg00002.html · vendor-advisory, x_refsource_APPLE, x_transferred
• docs.info.apple.com /article.html?artnum=307179 · x_refsource_CONFIRM, x_transferred
• exploit-db.com /exploits/4759 · exploit, x_refsource_EXPLOIT-DB, x_transferred

Sources

• CVE List: CVE-2007-3876
• NVD: CVE-2007-3876

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.