Test ID:	1.3.6.1.4.1.25623.1.0.812408
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Security Updates (HT208331)-04
Summary:	Apple Mac OS X is prone to multiple vulnerabilities.
Description:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: The Security update resolves, - A memory corruption issue was addressed with improved memory handling. - An out-of-bounds read was addressed through improved bounds checking. - A logic error existed in the validation of credentials. - An inconsistent user interface issue was addressed with improved state management. - An input validation issue existed in the kernel. - An out-of-bounds read issue existed that led to the disclosure of kernel memory. - A validation issue was addressed with improved input sanitization. - An encryption issue existed with S/MIME credentials. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary code with kernel and system privileges. Also attacker may be able to bypass administrator authentication without supplying the administrator's password. Affected Software/OS: Apple Mac OS X version 10.13.1 Solution: Upgrade to Apple Mac OS X 10.13.2 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-13876 BugTraq ID: 102100 http://www.securityfocus.com/bid/102100 https://www.exploit-db.com/exploits/43325/ http://www.securitytracker.com/id/1039952 http://www.securitytracker.com/id/1039953 http://www.securitytracker.com/id/1039966 Common Vulnerability Exposure (CVE) ID: CVE-2017-13875 BugTraq ID: 102099 http://www.securityfocus.com/bid/102099 https://www.exploit-db.com/exploits/43327/ Common Vulnerability Exposure (CVE) ID: CVE-2017-13871 Common Vulnerability Exposure (CVE) ID: CVE-2017-13860 BugTraq ID: 102097 http://www.securityfocus.com/bid/102097 Common Vulnerability Exposure (CVE) ID: CVE-2017-13883 Common Vulnerability Exposure (CVE) ID: CVE-2017-13848 Common Vulnerability Exposure (CVE) ID: CVE-2017-13858 Common Vulnerability Exposure (CVE) ID: CVE-2017-13878 https://www.exploit-db.com/exploits/43780/ Common Vulnerability Exposure (CVE) ID: CVE-2017-13865 https://www.exploit-db.com/exploits/43321/
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.