CVE-2007-0720: apple mac_os_x
CVSS: 5.0v2.0MediumModified
AliasesRHSA-2007:0123DEBIAN-CVE-2007-0720
Published 13-03-2007Last modified 07-08-2024
Vulnerability summary
CVE-2007-0720 is a medium (CVSS 5.0) vulnerability in apple mac_os_x. EPSS estimates a 5.49% chance of exploitation in the next 30 days, higher than 92.6% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
5.49%
0%100%
Low · +0.17 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 13-03-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The CUPS service on multiple platforms allows remote attackers to cause a denial of service (service hang) via a "partially-negotiated" SSL connection, which prevents other requests from being accepted.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
5.49%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
+0.17 pp
From 5.32% on 19-09-2026
19-09-202619-10-2026
EPSS score5.49%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat5 products
- cups< 1:1.1.17-13.3.42 | < 1:1.1.22-0.rc1.9.18 | < 1:1.2.4-11.5.1.el5
- cups-debuginfo< 1:1.1.17-13.3.42 | < 1:1.1.22-0.rc1.9.18 | < 1:1.2.4-11.5.1.el5
- cups-devel< 1:1.1.17-13.3.42 | < 1:1.1.22-0.rc1.9.18 | < 1:1.2.4-11.5.1.el5
- cups-libs< 1:1.1.17-13.3.42 | < 1:1.1.22-0.rc1.9.18 | < 1:1.2.4-11.5.1.el5
- cups-lpd< 1:1.2.4-11.5.1.el5
Apple1 product
- mac_os_x< 10.4.9
Cups1 product
- cups< 1.2.8
Debian1 product
- cups< 1.2.7-1
4 vendors · 8 products
References
38 links- bugzilla.redhat.com/bugzilla/show_bug.cgi?id=232243X Refsource MISCIssue TrackingThird Party Advisory
- www.mandriva.com/security/advisories?name=MDKSA-2007:086Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- www.us-cert.gov/cas/techalerts/TA07-072A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
Show all 38 references
- www.securityfocus.com/archive/1/463846/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlVendor AdvisoryX Refsource APPLEMailing List
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11046VDB EntrySignatureX Refsource OVALThird Party Advisory
- www.redhat.com/support/errata/RHSA-2007-0123.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory