CVE-2007-0236

Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (kernel panic) and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow.

Date published : 2007-01-16

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

http://www.securityfocus.com/bid/22041