CVE-2007-0735
Status: ModifiedHigh (9.3)—
Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Base score: 9.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 3.62%
- Percentile among all scored CVEs: 89
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- NVD-CWE-Other
References
- http://docs.info.apple.com/article.html?artnum=305391
- http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
- http://secunia.com/advisories/24966
- http://www.osvdb.org/34860
- http://www.securityfocus.com/bid/23569
- http://www.securitytracker.com/id?1017942
- http://www.us-cert.gov/cas/techalerts/TA07-109A.html
- http://www.vupen.com/english/advisories/2007/1470
- http://docs.info.apple.com/article.html?artnum=305391
- http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
- http://secunia.com/advisories/24966
- http://www.osvdb.org/34860
- http://www.securityfocus.com/bid/23569
- http://www.securitytracker.com/id?1017942
- http://www.us-cert.gov/cas/techalerts/TA07-109A.html
- http://www.vupen.com/english/advisories/2007/1470
Raw JSON (NVD)
Show
{
"id": "CVE-2007-0735",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-04-24T17:19:00.000",
"references": [
{
"url": "http://docs.info.apple.com/article.html?artnum=305391",
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/24966",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/34860",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/23569",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1017942",
"source": "cve@mitre.org"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2007/1470",
"source": "cve@mitre.org"
},
{
"url": "http://docs.info.apple.com/article.html?artnum=305391",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/24966",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/34860",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/23569",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1017942",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA07-109A.html",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/1470",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving crafted web pages that trigger certain error conditions that are not properly reported in certain circumstances, resulting in accessing deallocated memory."
},
{
"lang": "es",
"value": "Vulnerabilidad de uso después de la liberación (Use-After-Free) en Libinfo en Apple Mac OS X 10.3.9 hasta la 10.4.9 permite a atacantes remotos provocar denegación de servicio (caida de aplicación) o posiblemente ejecutar código de su elección a través de vectores no especificados afectadndo a páginas web manipuladas que disparán ciertas condiciones de error que no son informadas ed forma adecuada bajo ciertas circustancias, desembocando en un acceso a memoria no asignada."
}
],
"lastModified": "2026-06-16T22:36:10.977",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C580935-0091-4163-B747-750FB7686973"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09ED46A8-1739-411C-8807-2A416BDB6DFE"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "786BB737-EA99-4EC6-B742-0C35BF2453F9"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8923EE1A-DD48-4EC8-8698-A33093FD709C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D24D5FA5-95DD-4ECC-B99A-8CB33156A6D0"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29644501-54BD-45E9-A6C1-618892CD354F"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A132487-E89F-4D0D-8366-14AFC904811F"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD231103-D7C7-4697-BE90-D67558D6115C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCADAAA0-C885-466C-A122-A94E73EAF817"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "448DB1C7-7B0C-4076-9B9F-1CDCD5EB6930"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BE429EF-24D4-453A-8B43-8CCEF5D72773"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AC9692A-CE81-446D-B136-449662C4B9A2"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "504D78AB-5374-48C9-B357-DB6BD2267D2D"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3029892E-1375-4F40-83D3-A51BDC4E9840"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}