CVE-2007-0753

macOS 10.3.9 and 10.4.9 - Local Remote Code Execution via VPN Daemon Format String

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2007-0753. PoCs published by Kevin Finisterre, Chris Anley.

AI-analyzed exploit summary This entry is a reference to CVE-2007-0753, a vulnerability in Apple QuickTime, but contains no actual exploit code. It includes a link to a tar.gz file and metadata about the CVE.

Description

Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter.

Exploits (2)

exploitdb WRITEUP VERIFIED
by Kevin Finisterre · textlocalosx
https://www.exploit-db.com/exploits/4013

This entry is a reference to CVE-2007-0753, a vulnerability in Apple QuickTime, but contains no actual exploit code. It includes a link to a tar.gz file and metadata about the CVE.

Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Apple QuickTime
No auth needed
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Chris Anley · textlocalosx
https://www.exploit-db.com/exploits/30096

The provided text describes a format-string vulnerability in Apple Mac OS X's VPN service daemon, which can lead to arbitrary code execution with superuser privileges. It references CVE-2007-0753 and provides context but does not include actual exploit code.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: Apple Mac OS X Server 10.4.9 and prior
No auth needed
Prerequisites: Network access to the VPN service daemon
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (11)

Core 11
Core References
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=305530
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1939
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34505
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018125
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24208
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25402
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24144
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/469882/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/35143
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/469889/100/0/threaded

Scores

EPSS 0.0093
EPSS Percentile 55.8%

Details

CWE
CWE-134
Status published
Products (40)
apple/mac_os_x 10.3
apple/mac_os_x 10.3.1
apple/mac_os_x 10.3.2
apple/mac_os_x 10.3.3
apple/mac_os_x 10.3.4
apple/mac_os_x 10.3.5
apple/mac_os_x 10.3.6
apple/mac_os_x 10.3.7
apple/mac_os_x 10.3.8
apple/mac_os_x 10.3.9
... and 30 more
Published May 24, 2007
Tracked Since Feb 18, 2026