CVE-2007-0463

Apple Software Update 2.0.5 - Remote Code Execution via Format String Specifiers

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-0463. PoCs published by kf.

AI-analyzed exploit summary This exploit leverages a format-string vulnerability in Apple Software Update by creating a maliciously named file. The vulnerability arises from improper sanitization of user-supplied input, which is passed as a format specifier to a formatted-printing function, potentially leading to arbitrary code execution or crashes.

Description

Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in (1) SWUTMP or (2) SUCATALOG filenames, or using the (3) application/x-apple.sucatalog+xml MIME type.

Exploits (1)

exploitdb WORKING POC VERIFIED

by kf · textdososx

https://www.exploit-db.com/exploits/29523

View Code ZIP pw:eip

This exploit leverages a format-string vulnerability in Apple Software Update by creating a maliciously named file. The vulnerability arises from improper sanitization of user-supplied input, which is passed as a format specifier to a formatted-printing function, potentially leading to arbitrary code execution or crashes.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Apple Software Update (version not specified)

No auth needed

Prerequisites: Ability to create a file in a directory accessible by the vulnerable application

MITRE ATT&CK