PT-2011-2163 · Apple · Macos X

Jeff Mears · Published 2011-03-23 · Updated 2012-02-14 · CVE-2011-0182

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7

Description The issue is related to the i386 set ldt system call in the kernel, which does not properly handle call gates. This allows local users to gain privileges via vectors involving the creation of a call gate entry.

Recommendations For versions prior to 10.6.7, update to Mac OS X 10.6.7 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-0182

Affected Products

Macos X

References · 5

• 🔥 https://exploit-db.com/exploits/17901 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0182 · Security Note
• http://support.apple.com/kb/HT4581 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html · Vendor Advisory
• http://securityreason.com/securityalert/8402 · Note