Test ID:	1.3.6.1.4.1.25623.1.0.806677
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Multiple Vulnerabilities-01 (Feb 2016)
Summary:	Apple Mac OS X is prone to multiple vulnerabilities.
Description:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Multiple memory corruption errors in the parsing of disk images and IOHIDFamily API. - A type confusion error within libxslt. - Other multiple memory corruption errors. - An error when searching for scripting libraries. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary code, override OSA script libraries. Affected Software/OS: Apple Mac OS X versions 10.9.x through 10.9.5 prior to build 13F1603, 10.10.x through 10.10.5 prior to build 14F1605 and 10.11.x before 10.11.3 Solution: Upgrade Apple Mac OS X 10.11.x to version 10.11.3 or later or apply appropriate patch for Apple Mac OS X 10.9.x and 10.10.x. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1716 http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html http://www.securitytracker.com/id/1034736 Common Vulnerability Exposure (CVE) ID: CVE-2016-1717 http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2016-1718 http://zerodayinitiative.com/advisories/ZDI-16-020/ Common Vulnerability Exposure (CVE) ID: CVE-2016-1719 https://www.exploit-db.com/exploits/39359/ https://www.exploit-db.com/exploits/39360/ https://www.exploit-db.com/exploits/39361/ https://www.exploit-db.com/exploits/39362/ https://www.exploit-db.com/exploits/39363/ https://www.exploit-db.com/exploits/39364/ http://packetstormsecurity.com/files/135438/iOS-Kernel-IOReportHub-Use-After-Free.html http://packetstormsecurity.com/files/135439/iOS-Kernel-IOHIDEventService-Use-After-Free.html http://packetstormsecurity.com/files/135440/iOS-Kernel-AppleOscarCMA-Use-After-Free.html http://packetstormsecurity.com/files/135441/iOS-Kernel-AppleOscarCompass-Use-After-Free.html http://packetstormsecurity.com/files/135442/iOS-Kernel-AppleOscarAccelerometer-Use-After-Free.html http://packetstormsecurity.com/files/135443/iOS-Kernel-AppleOscarGyro-Use-After-Free.html https://code.google.com/p/google-security-research/issues/detail?id=603 https://code.google.com/p/google-security-research/issues/detail?id=604 https://code.google.com/p/google-security-research/issues/detail?id=605 https://code.google.com/p/google-security-research/issues/detail?id=606 https://code.google.com/p/google-security-research/issues/detail?id=607 https://code.google.com/p/google-security-research/issues/detail?id=608 Common Vulnerability Exposure (CVE) ID: CVE-2016-1720 https://www.exploit-db.com/exploits/39367/ http://packetstormsecurity.com/files/135435/IOKit-Methods-Being-Called-Without-Locks-From-IOServiceClose.html https://code.google.com/p/google-security-research/issues/detail?id=597 Common Vulnerability Exposure (CVE) ID: CVE-2016-1721 https://www.exploit-db.com/exploits/39358/ http://packetstormsecurity.com/files/135444/iOS-OS-X-Kernel-Uninitialized-Variable-Code-Execution.html https://code.google.com/p/google-security-research/issues/detail?id=618 Common Vulnerability Exposure (CVE) ID: CVE-2016-1722 Common Vulnerability Exposure (CVE) ID: CVE-2016-1729 Common Vulnerability Exposure (CVE) ID: CVE-2015-7995 BugTraq ID: 77325 http://www.securityfocus.com/bid/77325 Debian Security Information: DSA-3605 (Google Search) http://www.debian.org/security/2016/dsa-3605 http://www.openwall.com/lists/oss-security/2015/10/27/10 http://www.openwall.com/lists/oss-security/2015/10/28/4 http://www.securitytracker.com/id/1038623 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546 SuSE Security Announcement: openSUSE-SU-2016:1439 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.