CVE-2007-0724

Apple Mac OS X <10.5 - Privilege Escalation

Title source: llm
STIX 2.1

Description

The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.

References (15)

Core 15
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/34855
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24966
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
Patch, Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22948
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=305391
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=305214
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017751
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32973
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017942
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-109A.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0930
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1470
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24479

Scores

EPSS 0.0079
EPSS Percentile 52.5%

Details

Status published
Products (19)
apple/mac_os_x 10.3.9
apple/mac_os_x 10.4
apple/mac_os_x 10.4.1
apple/mac_os_x 10.4.2
apple/mac_os_x 10.4.3
apple/mac_os_x 10.4.4
apple/mac_os_x 10.4.5
apple/mac_os_x 10.4.6
apple/mac_os_x 10.4.7
apple/mac_os_x 10.4.8
... and 9 more
Published Mar 13, 2007
Tracked Since Feb 18, 2026