← back
CVE-2007-6359

CVE-2007-6359

EPSS 1.0%
The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service (failed assertion and system crash) via a crafted signed Mach-O binary that causes the hashes function to return NULL.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/4723unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://digit-labs.org/files/exploits/xnu-superblob-dos.chttp://lists.apple.com/archives/security-announce/2008//May/msg00001.htmlhttp://secunia.com/advisories/28048http://secunia.com/advisories/30430https://exchange.xforce.ibmcloud.com/vulnerabilities/38997http://www.securityfocus.com/bid/26840http://www.us-cert.gov/cas/techalerts/TA08-150A.htmlhttp://www.vupen.com/english/advisories/2007/4216http://www.vupen.com/english/advisories/2008/1697