CVE-2007-0267: apple mac_os_x Resource Management Errors
Vulnerability summary
CVE-2007-0267 is a medium (CVSS 6.6) Resource Management Errors vulnerability in apple mac_os_x. EPSS estimates a 0.98% chance of exploitation in the next 30 days, higher than 61.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 17-01-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by mounting a crafted UNIX File System (UFS) DMG image that contains a corrupted directory entry (struct direct), related to the ufs_dirbad function. NOTE: a third party states that the FreeBSD issue does not cross privilege boundaries.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.98%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
+0.03 pp
From 0.95% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundApple Mac OSX 10.4.8 - DMG UFS UFS_LookUp Denial of Service
Maturity: poc
Weaknesses
CWE · root causeAffected systems
2 vendors · 2 products
References
12 links- www.us-cert.gov/cas/techalerts/TA07-072A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- docs.info.apple.com/article.html?artnum=305214X Refsource CONFIRM
- projects.info-pull.com/moab/MOAB-12-01-2007.htmlX Refsource MISC