CVE-2007-0724: Medium severity Apple iOS and macOS vulnerability

Published Mar 13, 2007

Updated

The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.

Affected Software

19 affected components

Apple iOS and macOS=10.4.3

Apple Mac OS X Server=10.4.3

Apple iOS and macOS=10.4.1

Apple Mac OS X Server=10.4.2

Apple Mac OS X Server=10.4.4

Apple Mac OS X Server=10.4.1

Apple iOS and macOS=10.4.7

Apple iOS and macOS=10.4.4

Apple Mac OS X Server=10.4

Apple Mac OS X Server=10.4.5

Apple iOS and macOS=10.4

Apple Mac OS X Server=10.4.6

Apple Mac OS X Server=10.4.8

Apple iOS and macOS=10.4.6

Apple iOS and macOS=10.4.5

Apple iOS and macOS=10.3.9

Apple iOS and macOS=10.4.8

Apple Mac OS X Server=10.4.7

Apple iOS and macOS=10.4.2

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html

Event History

Mar 13, 2007

CVE Published

10:19 PM

Mar 14, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0724?

CVE-2007-0724 is a high severity vulnerability that allows local users to gain elevated privileges.

How do I fix CVE-2007-0724?

To fix CVE-2007-0724, users should update their Mac OS X systems to the latest version that addresses this vulnerability.

What versions of Apple Mac OS X are affected by CVE-2007-0724?

CVE-2007-0724 affects Apple Mac OS X versions 10.3.9 and 10.4 through 10.4.8.

What are the potential risks associated with CVE-2007-0724?

The risk associated with CVE-2007-0724 includes unauthorized access to keystrokes and potential privilege escalation by local users.

Is there a workaround for CVE-2007-0724?

There are no specific workarounds for CVE-2007-0724, and applying the security update is recommended.