CVE-2007-4686 — Apple MAC OS X vulnerability

CWE-1892 documents2 sources
Severity
7.2HIGHNVD
EPSS
0.2%
top 63.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedNov 15
Latest updateMay 1

Description

Integer signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to cause a denial of service (system shutdown) or gain privileges via a crafted TIOCSETD ioctl request.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDapple/mac_os_x10 versions+9
▶NVDapple/mac_os_x_server10 versions+9

Patches

Patch: lists.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-mgqg-9g67-qvcc: Integer signedness error in the ttioctl function in bsd/kern/tty↗2022-05-01
▶
CVE-2007-4686 — Apple MAC OS X vulnerability | cvebase