NVD

Id
52259  
Name
CVE-2007-0023  
Description
The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, allows local users to gain privileges via a malicious InputManager in Library/InputManagers in a user"s home directory, which is executed when Cocoa applications attempt to notify the user.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-01-23  
Modified Date
2011-03-07  
Seq
2007-0023  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263814 52259 CVE-2007-0023 http://docs.info.apple.com/article.html?artnum=305102  View
263815 52259 CVE-2007-0023 APPLE-SA-2007-02-15  View
263816 52259 CVE-2007-0023 http://projects.info-pull.com/moab/MOAB-22-01-2007.html  View
263817 52259 CVE-2007-0023 1017542  View
263818 52259 CVE-2007-0023 VU#315856  View
263819 52259 CVE-2007-0023 22188  View
263820 52259 CVE-2007-0023 TA07-047A  View
263821 52259 CVE-2007-0023 ADV-2007-0074  View
263822 52259 CVE-2007-0023 macos-inputmanager-privilege-escalation(31676)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51415 JVNDB-2007-000077 Apple Mac OS X の UserNotificationCenter における権限昇格の脆弱性 Apple Mac OS X の UserNotificationCenter.app における CFUserNotificationSendRequest() 関数に不備が存在し、diskutil と組み合わせて使用した際に権限昇格の脆弱性が存在します。 CVE-2007-0023 23378 CVE-2007-0023 52259 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000077.html 2007-01-23 2007-04-01 View