VULNERABILITY INTELLIGENCE
CVE-2008-0990
CVSS score4.4 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2008-03-18
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel, which allows local users to cause a denial of service via spoofed death notifications that prevent other applications from receiving notifications.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor