VULNERABILITY INTELLIGENCE
CVE-2007-5847
CVSS score6.6 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2007-12-19
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:N
Description
Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information.
Weakness classification
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')