NVD

Id
41  
Name
CVE-2008-0049  
Description
AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-03-18  
Modified Date
2011-03-07  
Seq
2008-0049  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
451 41 CVE-2008-0049 http://docs.info.apple.com/article.html?artnum=307562  View
452 41 CVE-2008-0049 APPLE-SA-2008-03-18  View
453 41 CVE-2008-0049 28304  View
454 41 CVE-2008-0049 28340  View
455 41 CVE-2008-0049 1019647  View
456 41 CVE-2008-0049 TA08-079A  View
457 41 CVE-2008-0049 ADV-2008-0924  View
458 41 CVE-2008-0049 macos-appkit-code-execution(41314)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45914 JVNDB-2008-001224 Apple Mac OS X の AppKit における不正なメッセージにより任意のコードを実行される脆弱性 Apple Mac OS X の AppKit には、スレッド間で同期している NSApplication の Mach ポートが、プロセス間通信でも利用可能なため、不正なメッセージにより任意のコードを実行される脆弱性が存在します。 CVE-2008-0049 30162 CVE-2008-0049 41 1.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001224.html 2008-03-18 2008-04-10 View