| Description: | Summary:
Apple Mac OS X is prone to multiple vulnerabilities.
Vulnerability Insight:
Multiple flaws exist due to:
- This issue related to existence of vulnerable code.
- A logic issue related to improper restrictions.
- A memory corruption issue related to improper state management.
- A memory corruption issue existed in the handling of IPv6 packets.
- A memory consumption issue related to improper memory handling.
- An issue related to improper checks.
- Multiple memory corruption issues related to improper input validation.
- An out-of-bounds read error related to improper bounds checking.
- A denial of service issue related to improper validation.
Please see the references for more information on the vulnerabilities.
Vulnerability Impact:
Successful exploitation allow attackers
to elevate privileges, check for the existence of arbitrary files, conduct
arbitrary code execution, determine kernel memory layout, disclosure of user
information, exfiltrate the contents of an encrypted PDF and cause unexpected
system termination or read kernel memory.
Affected Software/OS:
Apple Mac OS X versions 10.13.x through 10.13.6
prior to Security Update 2019-006, 10.14.x through 10.14.6 prior to
Security Update 2019-001.
Solution:
Apply security update 2019-001 for 10.14.x and
Security Update 2019-006 for 10.13.x from vendor.
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
