CVSS: 6.9EPSS: 0%CPEs: 1EXPL: 2CVE-2007-0023 – Apple Mac OSX 10.4.8 - 'UserNotificationCenter' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2007-0023
The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, allows local users to gain privileges via a malicious InputManager in Library/InputManagers in a user's home directory, which is executed when Cocoa applications attempt to notify the user. La función CFUserNotificationSendRequest en UserNotificationCenter.app de Apple Mac OS X 10.4.8, al ser usado en combinación con diskutil, permite a usuarios locales obtener privilegios mediante mediante un manejador de entrada (InputManager) en Library/InputManagers en el directorio raíz del usuario, el cual es ejecutado cuando aplicaciones Cocoa intentan notificar el usuario. • https://www.exploit-db.com/exploits/3181 http://docs.info.apple.com/article.html?artnum=305102 http://lists.apple.com/archives/Security-announce/2007/Feb/msg00000.html http://projects.info-pull.com/moab/MOAB-22-01-2007.html http://secunia.com/advisories/23846 http://secunia.com/advisories/24198 http://securitytracker.com/id?1017542 http://www.kb.cert.org/vuls/id/315856 http://www.osvdb.org/32695 http://www.securityfocus.com/bid/22188 http://www.us-cert.gov/ •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 1CVE-2007-0430 – Apple Mac OSX 10.4.x Kernel - 'shared_region_map_file_np()' Memory Corruption
https://notcve.org/view.php?id=CVE-2007-0430
The shared_region_map_file_np function in Apple Mac OS X 10.4.8 and earlier kernel allows local users to cause a denial of service (memory corruption) via a large mappingCount value. La función shared_region_map_file_np en Apple Mac OS X 10.4.8 y núcleos anetriores permite a usuarios locales provocar una denegación de servicio (corrupción de memoria) mediante un valor mappingCount grande. • https://www.exploit-db.com/exploits/3167 http://risesecurity.org/advisory.php?id=RISE-2007001.txt http://secunia.com/advisories/23823 http://securityreason.com/securityalert/2178 http://securitytracker.com/id?1017538 http://www.osvdb.org/32942 http://www.securityfocus.com/archive/1/457466/100/0/threaded http://www.vupen.com/english/advisories/2007/0275 https://exchange.xforce.ibmcloud.com/vulnerabilities/31645 •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1CVE-2007-0022
https://notcve.org/view.php?id=CVE-2007-0022
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program. Vulnerabilidad de ruta de búsqueda no confiable en writeconfig de Apple Mac OS X 10.4.8 permite a usuarios locales obtener privilegios mediante un PATH modificado que apunta a un programa launchctl malicioso. • http://docs.info.apple.com/article.html?artnum=305391 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html http://projects.info-pull.com/moab/MOAB-21-01-2007.html http://secunia.com/advisories/23793 http://secunia.com/advisories/24966 http://www.osvdb.org/31605 http://www.securityfocus.com/bid/22148 http://www.securitytracker.com/id?1017941 http://www.us-cert.gov/cas/techalerts/TA07-109A.html http://www.vupen.com/english/advisories/2007/0074 http •
CVSS: 7.2EPSS: 1%CPEs: 2EXPL: 1CVE-2007-0355 – Apple Mac OSX 10.4.8 - SLP Daemon Service Registration Buffer Overflow (PoC)
https://notcve.org/view.php?id=CVE-2007-0355
Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field. Un desbordamiento de búfer en Apple Minimal SLP v2 Service Agent (slpd) en Mac OS X versión 10.4.11 y anteriores, incluyendo versión 10.4.8, permite a usuarios locales, y posiblemente a atacantes remotos, alcanzar privilegios y posiblemente ejecutar código arbitrario por medio de una petición de registro con un campo attr-list no válido. • https://www.exploit-db.com/exploits/3151 http://docs.info.apple.com/article.html?artnum=307430 http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html http://projects.info-pull.com/moab/MOAB-17-01-2007.html http://secunia.com/advisories/23796 http://securitytracker.com/id?1017533 http://securitytracker.com/id?1019359 http://www.osvdb.org/32693 http://www.securityfocus.com/bid/22101 http://www.us-cert.gov/cas/techalerts/TA08-043B.html http://www. • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 34%CPEs: 4EXPL: 3CVE-2007-0342 – Apple WebKit build 18794 - WebCore Remote Denial of Service
https://notcve.org/view.php?id=CVE-2007-0342
WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-2019. WebCore en Apple WebKit construcción 18974 permite a un atacante remoto provocar denegación de servicio de un servicio (referencia null y caida de aplicación) a través del elemento TD con un gran número en el atributo ROWSPAN, como se demostró con un caida de OmniWeb 5.5.3 sobre Mac OS X 10.4.8, una vulnerabilidad diferente que la CVE-2006-2019. • https://www.exploit-db.com/exploits/29461 http://security-protocols.com/sp-x41-advisory.php http://www.securityfocus.com/bid/22059 • CWE-399: Resource Management Errors •