CVE-2007-3749

The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which…

published November 15, 2007

CVSS
—
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00451 · 37.9th percentile
Published
2007-11-15T01:00Z
EPSS history
Timeline
  • 15 NOV 01:00Z
    The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which…
    cvelistv5