Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.6

macOS 10.4.8 and FreeBSD 6.1 can crash when mounting malicious UFS image

CVE-2007-0267 · published 19 years ago
Summary

On macOS 10.4.8 and FreeBSD 6.1, a specially crafted UFS disk image can cause the operating system to panic (crash) and may damage other filesystems when it is mounted. The problem is triggered by a faulty lookup routine that mishandles a corrupted directory entry. Upgrade to a patched version of the operating system or avoid mounting untrusted UFS images until the fix is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple mac_os_x 10.4.8
cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*
freebsd freebsd 6.1
cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*
Original advisory text
The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by mounting a crafted UN...
The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by mounting a crafted UNIX File System (UFS) DMG image that contains a corrupted directory entry (struct direct), related to the ufs_dirbad function. NOTE: a third party states that the FreeBSD issue does not cross privilege boundaries.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.6 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published17 Jan 2007
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2007-0267 · NVD
Track software like this
Free during beta