CVE-2007-4702
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled...
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.
Exploit likelihood
What each source reports
NVD Score used
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.
- Record
CVE-2007-4702- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.
- Record
CVE-2007-4702- Updated
- 2026-11-02
EUVDEUVD-2007-4684 No score
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.
- Record
EUVD-2007-4684- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9p3q-ppjf-98hp No score
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled...
The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions.
- Record
GHSA-9p3q-ppjf-98hp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4702 is a high vulnerability (CVSS 9.3) in Apple Mac Os X, published November 15, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.25%, the 83rd percentile. No source names a fixed version.
References
secunia.com/advisories/27695
lists.apple.com/archives/security-announce/2007/Nov/msg00004.html
vupen.com/english/advisories/2007/3897
docs.info.apple.com/article.html?artnum=307004
securityfocus.com/bid/26461
securitytracker.com/id?1018958
exchange.xforce.ibmcloud.com/vulnerabilities/38506
nvd.nist.gov/vuln/detail/CVE-2007-4702
github.com/advisories/GHSA-9p3q-ppjf-98hp