CVE

Id
29204  
CVE No.
CVE-2007-5847  
Status
Candidate  
Description
Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information.  
Phase
Assigned (20071106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
306366 29204 CVE-2007-5847 CONFIRM:http://docs.info.apple.com/article.html?artnum=307179  View
306367 29204 CVE-2007-5847 APPLE:APPLE-SA-2007-12-17  View
306368 29204 CVE-2007-5847 URL:http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html  View
306369 29204 CVE-2007-5847 CERT:TA07-352A  View
306370 29204 CVE-2007-5847 URL:http://www.us-cert.gov/cas/techalerts/TA07-352A.html  View
306371 29204 CVE-2007-5847 BID:26910  View
306372 29204 CVE-2007-5847 URL:http://www.securityfocus.com/bid/26910  View
306373 29204 CVE-2007-5847 VUPEN:ADV-2007-4238  View
306374 29204 CVE-2007-5847 URL:http://www.vupen.com/english/advisories/2007/4238  View
306375 29204 CVE-2007-5847 SECTRACK:1019106  View
306376 29204 CVE-2007-5847 URL:http://securitytracker.com/id?1019106  View
306377 29204 CVE-2007-5847 SECUNIA:28136  View
306378 29204 CVE-2007-5847 URL:http://secunia.com/advisories/28136  View
306379 29204 CVE-2007-5847 XF:macos-core-foundation-information-disclosure(39095)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52354 JVNDB-2007-001044 CUPS の SNMP 用バックエンドプログラムにおける整数オーバーフローの脆弱性 CUPS には SNMP 用バックエンドプログラム (backend/snmp.c) の asn1_get_string() 関数において、SNMP レスポンスの取り扱いに不備があり、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-5849 29204 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001044.html  View