CVE-2007-0724

Severity: medium (CVSS 6.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-13 · updated 2026-06-16

Description

The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.

Affected products

macOS: 10.3.9, 10.4, 10.4.1, 10.4.2, 10.4.3, 10.4.4 (+4)
Apple Mac Os X Server: 10.4, 10.4.1, 10.4.2, 10.4.3, 10.4.4, 10.4.5 (+3)

References

http://docs.info.apple.com/article.html?artnum=305214
http://docs.info.apple.com/article.html?artnum=305391
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
http://secunia.com/advisories/24479
http://secunia.com/advisories/24966
http://www.osvdb.org/34855
http://www.securityfocus.com/bid/22948
http://www.securitytracker.com/id?1017751
http://www.securitytracker.com/id?1017942
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
http://www.us-cert.gov/cas/techalerts/TA07-109A.html

Get alerted when CVE-2007-0724 or the next vulnerability affects your stack