CVE-2007-0022
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to...
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program.
- Record
CVE-2007-0022- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program.
- Record
CVE-2007-0022- Updated
- 2026-11-02
EUVDEUVD-2007-0026 No score
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program.
- Record
EUVD-2007-0026- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-746x-w253-8cjm No score
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to...
Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program.
- Record
GHSA-746x-w253-8cjm- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0022 is a high vulnerability (CVSS 7.2) in Apple Mac Os X, published January 23, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. No source names a fixed version.
References
secunia.com/advisories/23793
projects.info-pull.com/moab/MOAB-21-01-2007.html
docs.info.apple.com/article.html?artnum=305391
osvdb.org/31605
us-cert.gov/cas/techalerts/TA07-109A.html
Show 8 moreShow less
securitytracker.com/id?1017941
exchange.xforce.ibmcloud.com/vulnerabilities/31677
lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
vupen.com/english/advisories/2007/1470
securityfocus.com/bid/22148
nvd.nist.gov/vuln/detail/CVE-2007-0022
github.com/advisories/GHSA-746x-w253-8cjm