CVE-2007-0724

Published: Mar 13, 2007Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.

Affected (19)

Products: Apple: Mac Os X, Mac Os X Server

2 products

Mac Os X Server

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.3.9
Apple Mac Os X	Version 10.4.1
Apple Mac Os X	Version 10.4.2
Apple Mac Os X	Version 10.4.3
Apple Mac Os X	Version 10.4.4
Apple Mac Os X	Version 10.4.5
Apple Mac Os X	Version 10.4.6
Apple Mac Os X	Version 10.4.7
Apple Mac Os X	Version 10.4.8
Apple Mac Os X	Version 10.4
Apple Mac Os X Server	Version 10.4.1
Apple Mac Os X Server	Version 10.4.2
Apple Mac Os X Server	Version 10.4.3
Apple Mac Os X Server	Version 10.4.4
Apple Mac Os X Server	Version 10.4.5
Apple Mac Os X Server	Version 10.4.6
Apple Mac Os X Server	Version 10.4.7
Apple Mac Os X Server	Version 10.4.8
Apple Mac Os X Server	Version 10.4

References (30)

http://docs.info.apple.com/article.html?artnum=305214

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=305391

Source: cve@mitre.org

http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/24479

Source: cve@mitre.org

http://secunia.com/advisories/24966

Source: cve@mitre.org

http://www.osvdb.org/34855

Source: cve@mitre.org

http://www.securityfocus.com/bid/22948

Source: cve@mitre.org

http://www.securitytracker.com/id?1017751

Source: cve@mitre.org

http://www.securitytracker.com/id?1017942

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: cve@mitre.org

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA07-109A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/0930

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1470

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32973

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=305214

Source: af854a3a-2127-422b-91ae-364da2661108

http://docs.info.apple.com/article.html?artnum=305391

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/24479

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24966

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/34855

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22948

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017751

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017942

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA07-109A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2007/0930

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1470

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/32973

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.