CVEvulnerability
CVE-2007-4699
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-11-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The default configuration of Safari in Apple Mac OS X 10.4 through 10.4.10 adds a private key to the keychain with permissions that allow other applications to access the key without warning the user, which might allow other applications to bypass intended access restrictions.
Affected configurations
• apple safari
Related
Weakness · not in database (1)
References
- http://docs.info.apple.com/article.html?artnum=307041 docs.info.apple.com
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html Patch
- http://secunia.com/advisories/27643 Vendor Advisory
- http://securitytracker.com/id?1018948 securitytracker.com
- http://www.securityfocus.com/bid/26444 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-319A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/3868 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38485 exchange.xforce.ibmcloud.com
- http://docs.info.apple.com/article.html?artnum=307041 docs.info.apple.com
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html Patch
- http://secunia.com/advisories/27643 Vendor Advisory
- http://securitytracker.com/id?1018948 securitytracker.com
- http://www.securityfocus.com/bid/26444 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-319A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/3868 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38485 exchange.xforce.ibmcloud.com