high7.2Public exploit code
CVE-2011-0182
The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX < 10.6.7 - Kernel Panic (Denial of Service)2011-09-28 · dos · osx
Impact
The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.6.6 Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4 |
| Apple | Mac Os X Server | through 10.6.6 Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
- http://securityreason.com/securityalert/8402
- http://support.apple.com/kb/HT4581
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
- http://securityreason.com/securityalert/8402
- http://support.apple.com/kb/HT4581