Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.810986
Category:Mac OS X Local Security Checks
Title:Apple Mac OS X Multiple Vulnerabilities-HT207797
Summary:Apple Mac OS X is prone to multiple vulnerabilities.
Description:Summary:
Apple Mac OS X is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws exist due to:

- A certificate validation issue existed in EAP-TLS when a certificate
changed.

- Multiple memory corruption issues.

- Multiple input validation issues.

- A URL handling issue due to poor state management.

- An issue existed within the path validation logic for symlinks.

- A race condition due to poor locking mechanism.

- An access issue due to poor sandbox restrictions.

- A use after free issue due to poor state management.

- A buffer overflow issue due to poor memory handling.

Vulnerability Impact:
Successful exploitation will allow attacker
to obtain sensitive information, gain extra privileges, execute arbitrary code,
and bypass security restrictions.

Affected Software/OS:
Apple Mac OS X version 10.12.x before
10.12.5

Solution:
Upgrade to Apple Mac OS X version
10.12.5 or later.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-6988
http://www.securitytracker.com/id/1038484
Common Vulnerability Exposure (CVE) ID: CVE-2017-6978
https://www.exploit-db.com/exploits/42056/
Common Vulnerability Exposure (CVE) ID: CVE-2017-2502
BugTraq ID: 98468
http://www.securityfocus.com/bid/98468
Common Vulnerability Exposure (CVE) ID: CVE-2017-2497
Common Vulnerability Exposure (CVE) ID: CVE-2017-6981
Common Vulnerability Exposure (CVE) ID: CVE-2017-6986
Common Vulnerability Exposure (CVE) ID: CVE-2017-2503
Common Vulnerability Exposure (CVE) ID: CVE-2017-2545
Common Vulnerability Exposure (CVE) ID: CVE-2017-2494
Common Vulnerability Exposure (CVE) ID: CVE-2017-2501
https://www.exploit-db.com/exploits/42054/
Common Vulnerability Exposure (CVE) ID: CVE-2017-2507
Common Vulnerability Exposure (CVE) ID: CVE-2017-2509
https://www.exploit-db.com/exploits/42046/
Common Vulnerability Exposure (CVE) ID: CVE-2017-6987
Common Vulnerability Exposure (CVE) ID: CVE-2017-2542
Common Vulnerability Exposure (CVE) ID: CVE-2017-2543
Common Vulnerability Exposure (CVE) ID: CVE-2017-6985
Common Vulnerability Exposure (CVE) ID: CVE-2017-2534
Common Vulnerability Exposure (CVE) ID: CVE-2017-6977
Common Vulnerability Exposure (CVE) ID: CVE-2017-2513
Common Vulnerability Exposure (CVE) ID: CVE-2017-2518
https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html
https://usn.ubuntu.com/4019-1/
https://usn.ubuntu.com/4019-2/
Common Vulnerability Exposure (CVE) ID: CVE-2017-2520
Common Vulnerability Exposure (CVE) ID: CVE-2017-2519
Common Vulnerability Exposure (CVE) ID: CVE-2017-6983
Common Vulnerability Exposure (CVE) ID: CVE-2017-6991
CopyrightCopyright (C) 2017 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.