notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel, which allows local users to cause a denial of service via spoofed death notifications that prevent other applications from receiving notifications.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2008-03-18 16:44
Updated : 2017-08-07 18:29
NVD link : CVE-2008-0990
Mitre link : CVE-2008-0990
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
apple
- mac_os_x
- mac_os_x_server