CVE-2007-0229: apple mac_os_x Numeric Errors

CVSS: 7.2v2.0HighModified

Published 13-01-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-0229 is a high (CVSS 7.2) Numeric Errors vulnerability in apple mac_os_x. EPSS estimates a 1.13% chance of exploitation in the next 30 days, higher than 65.9% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

39/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.2/10

010

High · v2.0 (NVD)

EPSS score

1.13%

0%100%

Low · +0.03 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Timeline

13-01-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted DMG image that causes "allocation of a negative size buffer" leading to a heap-based buffer overflow, a related issue to CVE-2006-5679. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.

CVSS metrics

1 score · 1 source · 1 version

v2.07.2

EPSS trend

Probability

1.13%

Chance of exploitation in the next 30 days

Percentile

66%

Versus all other CVEs

30-day change

+0.03 pp

From 1.10% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (projects.info-pull.com)
Maturity: unknown
exploit-databasedososxVerified
Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow
Maturity: poc