CVE-2007-3749

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-15 · updated 2026-06-16
Weakness: CWE-665

Description

The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process.

Affected products

macOS: from 10.4.0 through 10.4.10

References

http://docs.info.apple.com/article.html?artnum=307041
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=630
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
http://secunia.com/advisories/27643
http://www.securityfocus.com/bid/26444
http://www.us-cert.gov/cas/techalerts/TA07-319A.html
http://www.vupen.com/english/advisories/2007/3868
https://exchange.xforce.ibmcloud.com/vulnerabilities/38466
http://docs.info.apple.com/article.html?artnum=307041
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=630
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
http://secunia.com/advisories/27643

Get alerted when CVE-2007-3749 or the next vulnerability affects your stack