PT-2007-2176 · Apple · Macos X

Publicado 2007-03-13 · Atualizado 2017-07-29 · CVE-2007-0724

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.8

Description The issue is related to the IOKit HID interface, which does not sufficiently limit access to certain controls. This allows local users to gain privileges by using HID device events to read keystrokes from the console.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.8, consider restricting access to the IOKit HID interface as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2007-0724

Produtos afetados

Macos X

Referências · 16

• http://osvdb.org/34855 · Nota
• http://vupen.com/english/advisories/2007/0930 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32973 · Nota
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Nota
• http://secunia.com/advisories/24479 · Nota
• http://securitytracker.com/id?1017751 · Nota
• http://vupen.com/english/advisories/2007/1470 · Nota
• http://us-cert.gov/cas/techalerts/TA07-072A.html · Nota
• http://docs.info.apple.com/article.html?artnum=305391 · Nota
• http://securityfocus.com/bid/22948 · Nota
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0724 · Nota de Segurança
• http://securitytracker.com/id?1017942 · Nota
• http://secunia.com/advisories/24966 · Nota
• http://docs.info.apple.com/article.html?artnum=305214 · Nota