OSVDB ID: 70690

Title: Apple Mac OS X USB Human Interface Device Functionality Warning Weakness Arbitrary Program Execution

Info

Disclosure

Jan 19, 2011

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Apple Mac OS X fails to warn the user before enabling additional Human Interface Device functionality over USB. This may allow a context-dependent attacker to use crafted USB data, such as from a smartphone, to execute arbitrary programs.

Classification

Location: Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Public
Disclosure: Uncoordinated Disclosure

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

Apple Inc.

Mac OS X

Unspecified

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/70690