CVE-2008-0049 - CVE Reference - Advisories

CVE Reference: CVE-2008-0049

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0049

Description: AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications.

CVE Status: Candidate

References: ST 1019647 SAID Secunia Advisory: SA29420 CONFIRM http://docs.info.apple.com/article.html?artnum=307562 CERT http://www.us-cert.gov/cas/techalerts/TA08-079A.html BID 28340 28304 APPLE http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Debian OpenSSL Predictable Random Number Generator and Update

2.	Fusebox "FUSEBOX_APPLIC ATION_PATH" File Inclusion

3.	Drupal Site Documentation Module Information Disclosure

4.	Linux Kernel Multiple Vulnerabilities

5.	phpVID "query" Cross-Site Scripting Vulnerability

6.	TYPO3 sr_feuser_regis ter Extension Multiple Vulnerabilities

7.	Microsoft Word Two Code Execution Vulnerabilities

8.	Oracle Application Server Portal Authentication Bypass

9.	LANAI CMS Multiple File Extensions Vulnerability

10.	Cisco Unified Presence SIP Proxy Service Denial of Service