About the security content of Mac OS X 10.4.11 and Security Update 2007-008 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2005-1260bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb")
• CVE-2005-0953n/a: security vulnerability
• CVE-2006-6127n/a: security vulnerability
• CVE-2007-4700n/a: security vulnerability
• CVE-2007-4701WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF file, which allows local users to read the contents of that file
• CVE-2007-4743n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-4696n/a: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CVE-2007-4697n/a: security vulnerability
• CVE-2007-4698n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-4699n/a: security vulnerability
• CVE-2007-4695n/a: Improper Input Validation
• CVE-2007-4694Safari in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to access local content via file:// URLs
• CVE-2007-4693n/a: Improper Authentication
• CVE-2007-4686n/a: security vulnerability
• CVE-2007-4681n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-4678n/a: security vulnerability
• CVE-2007-4689n/a: security vulnerability
• CVE-2007-4684Integer overflow in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a large num_sels argument to the i386_set_ldt system call
• CVE-2007-4687n/a: security vulnerability
• CVE-2007-4690Double free vulnerability in the NFS component in Apple Mac OS X 10.4 through 10.4.10 allows remote authenticated users to execute arbitrary code via a crafted AUTH_UNIX RPC packet
• CVE-2007-4680n/a: Improper Authentication
• CVE-2007-4683n/a: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2007-4682n/a: Access of Uninitialized Pointer
• CVE-2007-4685n/a: security vulnerability
• CVE-2007-4691The NSURL component in Apple Mac OS X 10.4 through 10.4.10 performs case-sensitive comparisons that allow attackers to bypass intended restrictions for local file system URLs
• CVE-2007-4688The Networking component in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to obtain all addresses for a host, including link-local addresses, via a Node Information Query
• CVE-2007-4671n/a: Improper Input Validation
• CVE-2007-4692n/a: Improper Authentication
• CVE-2007-4679CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands
• CVE-2007-4269n/a: security vulnerability
• CVE-2007-4267n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-4268n/a: Incorrect Conversion between Numeric Types
• CVE-2007-3999n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-3756n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2007-3758n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-3749n/a: Improper Initialization
• CVE-2007-3760n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-3456n/a: security vulnerability
• CVE-2007-2926n/a: security vulnerability
• CVE-2007-0646n/a: Use of Externally-Controlled Format String
• CVE-2007-0464n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer

Source and provenance

Original title: About the security content of Mac OS X 10.4.11 and Security Update 2007-008 - Apple Support. Captured 18 Oct 2026, 08:07 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.