CVE-2007-3749 in Mac OS Xinfo

Summary

The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

07/12/2007

Disclosure

11/14/2007

Entries

1: VDB-39695

CPE

ready

Exploit

Download

CVSS

9.3

EPSS

0.00147

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!