About Security Update 2007-007 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2007-2447n/a: security vulnerability
• CVE-2004-2541Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target
• CVE-2004-0996main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack
• CVE-2005-3128Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag
• CVE-2005-2090n/a: security vulnerability
• CVE-2005-0758zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script
• CVE-2006-6142n/a: security vulnerability
• CVE-2006-4019n/a: security vulnerability
• CVE-2006-3174n/a: security vulnerability
• CVE-2006-2842n/a: security vulnerability
• CVE-2007-3944n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-3746n/a: security vulnerability
• CVE-2007-3747n/a: security vulnerability
• CVE-2007-3748n/a: security vulnerability
• CVE-2007-3744n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-3742n/a: security vulnerability
• CVE-2007-3745n/a: security vulnerability
• CVE-2007-2798n/a: Out-of-bounds Write
• CVE-2007-2589n/a: Cross-Site Request Forgery (CSRF)
• CVE-2007-2443n/a: security vulnerability
• CVE-2007-2446n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2007-2442n/a: Access of Uninitialized Pointer
• CVE-2007-2407n/a: security vulnerability
• CVE-2007-2406n/a: security vulnerability
• CVE-2007-2404n/a: security vulnerability
• CVE-2007-2410n/a: security vulnerability
• CVE-2007-2403n/a: security vulnerability
• CVE-2007-2409n/a: security vulnerability
• CVE-2007-2408n/a: Improper Input Validation
• CVE-2007-2405Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file
• CVE-2007-1860n/a: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2007-1717n/a: security vulnerability
• CVE-2007-1711n/a: security vulnerability
• CVE-2007-1583n/a: security vulnerability
• CVE-2007-1460n/a: security vulnerability
• CVE-2007-1484n/a: security vulnerability
• CVE-2007-1521n/a: security vulnerability
• CVE-2007-1461n/a: security vulnerability
• CVE-2007-1358n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-1262n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-1287n/a: security vulnerability
• CVE-2007-1001n/a: security vulnerability
• CVE-2007-0478n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2007-0450n/a: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Source and provenance

Original title: About Security Update 2007-007 - Apple Support. Captured 18 Oct 2026, 08:07 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.