CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Numeric Errors
Summary: integer signedness error in the networking component in apple mac os x 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted appletalk message with a negative value, which satisfies a signed comparison during mbuf allocation but is later interpreted as an unsigned value, which triggers a heap-based buffer overflow. "by sending a maliciously crafted appletalk message, a local user may
cause an unexpected system shutdown or arbitrary code execution with
system privileges."
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2007-11-15
Last Modified Date: 2017-07-29