Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2007-0023

The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, allows local users to gain privileges via a malicious InputManager in Library/InputManagers in a user's home directory, which is executed when Cocoa applications attempt to notify the user.

  • Published: Jan 24, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-0023
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.9
  • AV:L/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
apple / mac_os_x 10.4.8 10.4.8.x