About Security Update 2007-009 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2007-3798n/a: Unchecked Return Value
• CVE-2006-0024Multiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote attackers to execute arbitrary code via a crafted SWF file
• CVE-2007-6165n/a: Improper Input Validation
• CVE-2007-6077n/a: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CVE-2007-5863n/a: security vulnerability
• CVE-2007-5849n/a: security vulnerability
• CVE-2007-5856Quick Look Apple Mac OS X 10.5.1, when previewing an HTML file, does not prevent plug-ins from making network requests, which might allow remote attackers to obtain sensitive information
• CVE-2007-5855n/a: Improper Authentication
• CVE-2007-5860Unspecified vulnerability in Spin Tracer in Apple Mac OS X 10.5.1 allows local users to execute arbitrary code via unspecified output files, involving an "insecure file operation."
• CVE-2007-5859n/a: security vulnerability
• CVE-2007-5858n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-5857n/a: security vulnerability
• CVE-2007-5848Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service
• CVE-2007-5851iChat in Apple Mac OS X 10.4.11 allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors
• CVE-2007-5847n/a: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CVE-2007-5850Heap-based buffer overflow in Desktop Services in Apple Mac OS X 10.4.11 allows user-assisted attackers to execute arbitrary code via a directory with a crafted .DS_Store file
• CVE-2007-5854n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-5853n/a: security vulnerability
• CVE-2007-5861n/a: security vulnerability
• CVE-2007-5770n/a: Improper Authentication
• CVE-2007-5379n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2007-5476Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors
• CVE-2007-5380Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."
• CVE-2007-5398n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-5116n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-4965n/a: Integer Overflow or Wraparound
• CVE-2007-4768n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-4767n/a: security vulnerability
• CVE-2007-4766n/a: security vulnerability
• CVE-2007-4708Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler
• CVE-2007-4710n/a: security vulnerability
• CVE-2007-4709Directory traversal vulnerability in CFNetwork in Apple Mac OS X 10.5.1 allows remote attackers to overwrite arbitrary files via a crafted HTTP response
• CVE-2007-4572n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-4351n/a: security vulnerability
• CVE-2007-4131Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.
• CVE-2007-3876n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-1660n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-1661n/a: security vulnerability
• CVE-2007-1659n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-1662n/a: security vulnerability
• CVE-2007-1218n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer

Source and provenance

Original title: About Security Update 2007-009 - Apple Support. Captured 18 Oct 2026, 08:07 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.