PT-2007-2176 · Apple · Macos X

Published 2007-03-13 · Updated 2017-07-29 · CVE-2007-0724

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.3.9 through 10.4.8

Description The issue is related to the IOKit HID interface, which does not sufficiently limit access to certain controls. This allows local users to gain privileges by using HID device events to read keystrokes from the console.

Recommendations For Apple Mac OS X versions 10.3.9 through 10.4.8, consider restricting access to the IOKit HID interface as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2007-0724

Affected Products

Macos X

References · 16

• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0724 · Security Note
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Vendor Advisory
• http://osvdb.org/34855 · Note
• http://vupen.com/english/advisories/2007/0930 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32973 · Note
• http://us-cert.gov/cas/techalerts/TA07-109A.html · Note
• http://secunia.com/advisories/24479 · Note
• http://securitytracker.com/id?1017751 · Note
• http://vupen.com/english/advisories/2007/1470 · Note
• http://us-cert.gov/cas/techalerts/TA07-072A.html · Note
• http://docs.info.apple.com/article.html?artnum=305391 · Note
• http://securityfocus.com/bid/22948 · Note
• http://securitytracker.com/id?1017942 · Note
• http://secunia.com/advisories/24966 · Note