CVE-2007-5863: Apple Mac OS X

High severity, CVSS 9.3. EPSS: 23% chance of exploitation in the next 30 days.

Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle (MITM) attack between the client and the server, using a modified distribution definition file with the "allow-external-scripts" option.

Affected products

  • Apple Mac OS X: version 10.5.1 only
  • Apple Mac OS X Server: version 10.5.1 only

Published 2007-12-19. Last modified 2026-06-16.