CVE-2007-0724 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-0724
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0724

Description: The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/32973 ST 1017942 1017751 SAID Secunia Advisory: SA24479 Secunia Advisory: SA24966 OSVDB 34855 CONFIRM http://docs.info.apple.com/article.html?artnum=305391 http://docs.info.apple.com/article.html?artnum=305214 CERT http://www.us-cert.gov/cas/techalerts/TA07-109A.html http://www.us-cert.gov/cas/techalerts/TA07-072A.html BID 22948 APPLE http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

Return to the previous page.