CVEvulnerability
CVE-2007-0724
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.
Affected configurations
• apple mac os x 10.3.9
• apple mac os x 10.4
• apple mac os x 10.4.1
• apple mac os x 10.4.2
• apple mac os x 10.4.3
• apple mac os x 10.4.4
• apple mac os x 10.4.5
• apple mac os x 10.4.6
• apple mac os x 10.4.7
• apple mac os x 10.4.8
• apple mac os x server 10.4
• apple mac os x server 10.4.1
• apple mac os x server 10.4.2
• apple mac os x server 10.4.3
• apple mac os x server 10.4.4
• apple mac os x server 10.4.5
• apple mac os x server 10.4.6
• apple mac os x server 10.4.7
• apple mac os x server 10.4.8
References
- http://docs.info.apple.com/article.html?artnum=305214 docs.info.apple.com
- http://docs.info.apple.com/article.html?artnum=305391 docs.info.apple.com
- http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html Patch, Vendor Advisory
- http://secunia.com/advisories/24479 secunia.com
- http://secunia.com/advisories/24966 secunia.com
- http://www.osvdb.org/34855 www.osvdb.org
- http://www.securityfocus.com/bid/22948 www.securityfocus.com
- http://www.securitytracker.com/id?1017751 www.securitytracker.com
- http://www.securitytracker.com/id?1017942 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA07-109A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/0930 www.vupen.com
- http://www.vupen.com/english/advisories/2007/1470 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32973 exchange.xforce.ibmcloud.com
- http://docs.info.apple.com/article.html?artnum=305214 docs.info.apple.com
- http://docs.info.apple.com/article.html?artnum=305391 docs.info.apple.com
- http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html Patch, Vendor Advisory
- http://secunia.com/advisories/24479 secunia.com
- http://secunia.com/advisories/24966 secunia.com
- http://www.osvdb.org/34855 www.osvdb.org
- http://www.securityfocus.com/bid/22948 www.securityfocus.com
- http://www.securitytracker.com/id?1017751 www.securitytracker.com
- http://www.securitytracker.com/id?1017942 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA07-109A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/0930 www.vupen.com
- http://www.vupen.com/english/advisories/2007/1470 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32973 exchange.xforce.ibmcloud.com