# CVEs published 2007-12-19 26 CVEs were published on December 19, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-5963](https://cve.now/CVE-2007-5963.md): Unspecified vulnerability in kdebase allows local users to cause a denial of service (KDM login inaccessible, or resource consumption) via u (no CVSS) - [CVE-2007-6438](https://cve.now/CVE-2007-6438.md): Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (no CVSS) - [CVE-2007-6439](https://cve.now/CVE-2007-6439.md): Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) U (no CVSS) - [CVE-2007-6441](https://cve.now/CVE-2007-6441.md): The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors (no CVSS) - [CVE-2007-6450](https://cve.now/CVE-2007-6450.md): The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via (no CVSS) - [CVE-2007-6451](https://cve.now/CVE-2007-6451.md): Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial o (no CVSS) - [CVE-2007-3876](https://cve.now/CVE-2007-3876.md): Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) opti (no CVSS) - [CVE-2007-4708](https://cve.now/CVE-2007-4708.md): Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler. (no CVSS) - [CVE-2007-4709](https://cve.now/CVE-2007-4709.md): Directory traversal vulnerability in CFNetwork in Apple Mac OS X 10.5.1 allows remote attackers to overwrite arbitrary files via a crafted H (no CVSS) - [CVE-2007-4710](https://cve.now/CVE-2007-4710.md): Unspecified vulnerability in ColorSync in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application terminati (no CVSS) - [CVE-2007-5847](https://cve.now/CVE-2007-5847.md): Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure per (no CVSS) - [CVE-2007-5848](https://cve.now/CVE-2007-5848.md): Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service. (no CVSS) - [CVE-2007-5849](https://cve.now/CVE-2007-5849.md): Integer underflow in the asn1\_get\_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers t (no CVSS) - [CVE-2007-5850](https://cve.now/CVE-2007-5850.md): Heap-based buffer overflow in Desktop Services in Apple Mac OS X 10.4.11 allows user-assisted attackers to execute arbitrary code via a dire (no CVSS) - [CVE-2007-5851](https://cve.now/CVE-2007-5851.md): iChat in Apple Mac OS X 10.4.11 allows network-adjacent remote attackers to automatically initiate a video connection to another user via un (no CVSS) - [CVE-2007-5853](https://cve.now/CVE-2007-5853.md): Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (system (no CVSS) - [CVE-2007-5854](https://cve.now/CVE-2007-5854.md): Launch Services in Apple Mac OS X 10.4.11 and 10.5.1 does not treat HTML files as unsafe content, which allows attackers to conduct cross-si (no CVSS) - [CVE-2007-5855](https://cve.now/CVE-2007-5855.md): Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaintext authentication ev (no CVSS) - [CVE-2007-5856](https://cve.now/CVE-2007-5856.md): Quick Look Apple Mac OS X 10.5.1, when previewing an HTML file, does not prevent plug-ins from making network requests, which might allow re (no CVSS) - [CVE-2007-5857](https://cve.now/CVE-2007-5857.md): Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created, (no CVSS) - [CVE-2007-5858](https://cve.now/CVE-2007-5858.md): WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to (no CVSS) - [CVE-2007-5859](https://cve.now/CVE-2007-5859.md): Unspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application terminat (no CVSS) - [CVE-2007-5860](https://cve.now/CVE-2007-5860.md): Unspecified vulnerability in Spin Tracer in Apple Mac OS X 10.5.1 allows local users to execute arbitrary code via unspecified output files, (no CVSS) - [CVE-2007-5861](https://cve.now/CVE-2007-5861.md): Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (application te (no CVSS) - [CVE-2007-5863](https://cve.now/CVE-2007-5863.md): Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle (MITM) attack between (no CVSS) - [CVE-2007-6437](https://cve.now/CVE-2007-6437.md): Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service (crash) via a message with (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-12-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.