The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html | patch vendor advisory |
http://securityreason.com/securityalert/8402 | third party advisory |
http://support.apple.com/kb/HT4581 | patch vendor advisory |