Apple Mac OS X Mach_Loader.C Local Denial of Service Vulnerability

Bugtraq ID:	26700
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-6261
Remote:	No
Local:	Yes
Published:	Dec 04 2007 12:00AM
Updated:	Dec 13 2007 03:32AM
Credit:	<[email protected]> is credited with the discovery of this issue.
Vulnerable:	Apple Mac OS X 10.5.1 Apple Mac OS X 10.4
Not Vulnerable:

Apple Mac OS X Mach_Loader.C Local Denial of Service Vulnerability

Apple Mac OS X is prone to a local denial-of-service vulnerability because the kernel fails to properly handle exceptional conditions.

Exploiting this issue allows local, unprivileged users to crash affected kernels, denying further service to legitimate users.

Apple Mac OS X 10.4 and 10.5.1 are vulnerable to this issue; other versions may also be affected.

Apple Mac OS X Mach_Loader.C Local Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/26700.c

Apple Mac OS X Mach_Loader.C Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X Mach_Loader.C Local Denial of Service Vulnerability

References:

• Mac OS X Homepage (Apple)