CVE-2007-1279: High severity Apple iOS and macOS vulnerability

Published Apr 11, 2007

Updated

Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop management tools, allows local users to gain privileges via unspecified vectors during installation of the update by a different user who has administrative privileges.

Affected Software

2 affected components

Apple iOS and macOS

Adobe Bridge=1.0.3

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb07-09.html

Event History

Apr 11, 2007

CVE Published

10:19 PM

Data Sourced

10:19 PM

DescriptionWeaknessAffected Software

Apr 12, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1279?

CVE-2007-1279 has a moderate severity level due to potential privilege escalation risks.

How do I fix CVE-2007-1279?

To mitigate CVE-2007-1279, ensure that Adobe Bridge is updated to a patched version that resolves the vulnerability.

What systems are affected by CVE-2007-1279?

CVE-2007-1279 primarily affects Adobe Bridge version 1.0.3 on macOS systems.

Can local users exploit CVE-2007-1279?

Yes, local users can exploit CVE-2007-1279 to gain elevated privileges during the installation process.

Is there a workaround for CVE-2007-1279?

A potential workaround for CVE-2007-1279 is to limit the use of desktop management tools for patching Adobe software.