peter bassill · operator
$ cve CVE-2007-0162 JSON

CVE-2007-0162 EXPLOIT

6.8
MEDIUM · CVSS 2.0 · EPSS 0.8% (pctl 57)

Patch early

A public exploit exists.

Description

Unsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1) ApplicationEnhancer binary and the (2) /Library/Frameworks/ApplicationEnhancer.framework directory, which allows local users to gain privileges by modifying or replacing the binary or library files.

Scoring

CVSS6.8 (MEDIUM, v2.0)
VectorAV:L/AC:L/Au:S/C:C/I:C/A:C
EPSS0.84% — more likely to be exploited than 57% of all CVEs
On CISA KEVno
Public exploityes
Published2007-01-10
Last modified2026-06-16

Affected (1)

VendorProduct
unsanityapplication enhancer

Public exploits

References

→ the Explorer  ·  watch your stack  ·  NVD