CVE-2007-3749

7.8 highEPSS 0.5%

The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of the setuid process.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-665
Published: 2007-11-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:mac_os_x

References

http://docs.info.apple.com/article.html?artnum=307041
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=630
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
http://secunia.com/advisories/27643
http://www.securityfocus.com/bid/26444

Check your stack JSON