VULNERABILITY INTELLIGENCE
CVE-2007-0117
CVSS score10 HIGH
EPSS probability5.43%
CISA KEVNot currently listed
Published2007-01-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file permission changes upon execution of a diskutil permission repair operation.