7.5

CVE-2007-0342: apple mac_os_x Resource Management Errors

CVSS: 7.5v3.1HighModified
Published 18-01-2007Last modified 03-04-2025
Open JSON

Vulnerability summary

CVE-2007-0342 is a high (CVSS 7.5) Resource Management Errors vulnerability in apple mac_os_x. EPSS estimates a 4.55% chance of exploitation in the next 30 days, higher than 91.4% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk
41/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
4.55%
0%100%
Low · +2.29 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits3reference, exploit-database

Timeline

  1. 18-01-2007
    PublishedVulnerability first disclosed.
  2. 03-04-2025
    Last modifiedVulnerability information updated.

Description

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-2019.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

4.55%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

+2.29 pp

From 2.27% on 18-09-2026

18-09-202618-10-2026
EPSS score
4.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found
  • referenceUnverified

    Exploit Reference (securityfocus.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (security-protocols.com)

    Maturity: unknown

  • exploit-databasedososxVerified

    Apple WebKit build 18794 - WebCore Remote Denial of Service

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Apple3 products
Omnigroup1 product

2 vendors · 4 products

References

2 links