CVE-2007-0197
Finder 10.4.6 on Mac OS X 10.4.8 - DoS and RCE via Long Volume Name in DMG
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-0197. PoCs published by MoAB.
AI-analyzed exploit summary This exploit creates a malformed DMG file with an overly long volume name to trigger a buffer overflow in macOS's hdiutil, leading to potential arbitrary code execution. The PoC demonstrates the vulnerability by generating a DMG with a 255-character random volume name.
Description
Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption.
Exploits (1)
This exploit creates a malformed DMG file with an overly long volume name to trigger a buffer overflow in macOS's hdiutil, leading to potential arbitrary code execution. The PoC demonstrates the vulnerability by generating a DMG with a 255-character random volume name.