Test ID:	1.3.6.1.4.1.25623.1.0.810986
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Multiple Vulnerabilities (HT207797)
Summary:	Apple Mac OS X is prone to multiple vulnerabilities.
Description:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - A certificate validation issue existed in EAP-TLS when a certificate changed. - Multiple memory corruption issues. - Multiple input validation issues. - A URL handling issue due to poor state management. - An issue existed within the path validation logic for symlinks. - A race condition due to poor locking mechanism. - An access issue due to poor sandbox restrictions. - A use after free issue due to poor state management. - A buffer overflow issue due to poor memory handling. Vulnerability Impact: Successful exploitation will allow attacker to obtain sensitive information, gain extra privileges, execute arbitrary code, and bypass security restrictions. Affected Software/OS: Apple Mac OS X version 10.12.x before 10.12.5 Solution: Upgrade to Apple Mac OS X version 10.12.5 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6988 http://www.securitytracker.com/id/1038484 Common Vulnerability Exposure (CVE) ID: CVE-2017-6978 https://www.exploit-db.com/exploits/42056/ Common Vulnerability Exposure (CVE) ID: CVE-2017-2502 BugTraq ID: 98468 http://www.securityfocus.com/bid/98468 Common Vulnerability Exposure (CVE) ID: CVE-2017-2497 Common Vulnerability Exposure (CVE) ID: CVE-2017-6981 Common Vulnerability Exposure (CVE) ID: CVE-2017-6986 Common Vulnerability Exposure (CVE) ID: CVE-2017-2503 Common Vulnerability Exposure (CVE) ID: CVE-2017-2545 Common Vulnerability Exposure (CVE) ID: CVE-2017-2494 Common Vulnerability Exposure (CVE) ID: CVE-2017-2501 https://www.exploit-db.com/exploits/42054/ Common Vulnerability Exposure (CVE) ID: CVE-2017-2507 Common Vulnerability Exposure (CVE) ID: CVE-2017-2509 https://www.exploit-db.com/exploits/42046/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6987 Common Vulnerability Exposure (CVE) ID: CVE-2017-2542 Common Vulnerability Exposure (CVE) ID: CVE-2017-2543 Common Vulnerability Exposure (CVE) ID: CVE-2017-6985 Common Vulnerability Exposure (CVE) ID: CVE-2017-2534 Common Vulnerability Exposure (CVE) ID: CVE-2017-6977 Common Vulnerability Exposure (CVE) ID: CVE-2017-2513 Common Vulnerability Exposure (CVE) ID: CVE-2017-2518 https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html https://usn.ubuntu.com/4019-1/ https://usn.ubuntu.com/4019-2/ Common Vulnerability Exposure (CVE) ID: CVE-2017-2520 Common Vulnerability Exposure (CVE) ID: CVE-2017-2519 Common Vulnerability Exposure (CVE) ID: CVE-2017-6983 Common Vulnerability Exposure (CVE) ID: CVE-2017-6991
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.