Test ID:	1.3.6.1.4.1.25623.1.0.813113
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Security Updates (HT208692)-02
Summary:	Apple Mac OS X is prone to multiple vulnerabilities.
Description:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An input validation issue. - A command injection issue in the handling of Bracketed Paste Mode. - A buffer overflow error. - Memory corruption due to a logic issue. - An out-of-bounds read error. - A validation issue in the handling of symlinks. - A logic issue. - A race condition. - A race condition was addressed with additional validation. Vulnerability Impact: Successful exploitation of this vulnerability will allow remote attackers to read restricted memory, execute arbitrary code with system privileges, arbitrary command execution spoofing, gain access to user information, bypass code signing enforcement, launching arbitrary application and gain elevated privileges. Affected Software/OS: Apple Mac OS X versions 10.11.x through 10.11.6, 10.12.x through 10.12.6, 10.13.x through 10.13.3 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-4104 http://www.securitytracker.com/id/1040604 http://www.securitytracker.com/id/1040608 Common Vulnerability Exposure (CVE) ID: CVE-2018-4106 BugTraq ID: 103582 http://www.securityfocus.com/bid/103582 Common Vulnerability Exposure (CVE) ID: CVE-2018-4144 Common Vulnerability Exposure (CVE) ID: CVE-2018-4139 https://www.exploit-db.com/exploits/44561/ Common Vulnerability Exposure (CVE) ID: CVE-2018-4136 Common Vulnerability Exposure (CVE) ID: CVE-2018-4112 Common Vulnerability Exposure (CVE) ID: CVE-2018-4175 Common Vulnerability Exposure (CVE) ID: CVE-2018-4176 Common Vulnerability Exposure (CVE) ID: CVE-2018-4156 BugTraq ID: 103581 http://www.securityfocus.com/bid/103581 Common Vulnerability Exposure (CVE) ID: CVE-2018-4154 BugTraq ID: 105273 http://www.securityfocus.com/bid/105273 Common Vulnerability Exposure (CVE) ID: CVE-2018-4151 Common Vulnerability Exposure (CVE) ID: CVE-2018-4155 Common Vulnerability Exposure (CVE) ID: CVE-2018-4158 Common Vulnerability Exposure (CVE) ID: CVE-2018-4166
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.