Anfälligkeitssuche        Suche in 172616 CVE Beschreibungen
und 81291 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.806677
Kategorie:Mac OS X Local Security Checks
Titel:Apple Mac OS X Multiple Vulnerabilities-01 February-2016
Zusammenfassung:This host is running Apple Mac OS X and; is prone to multiple vulnerabilities.
Beschreibung:Summary:
This host is running Apple Mac OS X and
is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws exist due to,

- Multiple memory corruption errors in the parsing of disk images and IOHIDFamily
API.

- A type confusion error within libxslt.

- Other multiple memory corruption errors.

- An error when searching for scripting libraries.

Vulnerability Impact:
Successful exploitation will allow attacker
to execute arbitrary code, override OSA script libraries.

Affected Software/OS:
Apple Mac OS X versions 10.9.x through
10.9.5 prior to build 13F1603, 10.10.x through 10.10.5 prior to build 14F1605
and 10.11.x before 10.11.3

Solution:
Upgrade Apple Mac OS X 10.11.x to version
10.11.3 or later or apply appropriate patch for Apple Mac OS X 10.9.x and 10.10.x. Please see the references for more information.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: BugTraq ID: 81274
BugTraq ID: 81277
BugTraq ID: 77325
Common Vulnerability Exposure (CVE) ID: CVE-2016-1716
http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html
http://www.securitytracker.com/id/1034736
Common Vulnerability Exposure (CVE) ID: CVE-2016-1717
http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html
http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html
http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html
Common Vulnerability Exposure (CVE) ID: CVE-2016-1718
http://zerodayinitiative.com/advisories/ZDI-16-020/
Common Vulnerability Exposure (CVE) ID: CVE-2016-1719
https://www.exploit-db.com/exploits/39359/
https://www.exploit-db.com/exploits/39360/
https://www.exploit-db.com/exploits/39361/
https://www.exploit-db.com/exploits/39362/
https://www.exploit-db.com/exploits/39363/
https://www.exploit-db.com/exploits/39364/
http://packetstormsecurity.com/files/135438/iOS-Kernel-IOReportHub-Use-After-Free.html
http://packetstormsecurity.com/files/135439/iOS-Kernel-IOHIDEventService-Use-After-Free.html
http://packetstormsecurity.com/files/135440/iOS-Kernel-AppleOscarCMA-Use-After-Free.html
http://packetstormsecurity.com/files/135441/iOS-Kernel-AppleOscarCompass-Use-After-Free.html
http://packetstormsecurity.com/files/135442/iOS-Kernel-AppleOscarAccelerometer-Use-After-Free.html
http://packetstormsecurity.com/files/135443/iOS-Kernel-AppleOscarGyro-Use-After-Free.html
https://code.google.com/p/google-security-research/issues/detail?id=603
https://code.google.com/p/google-security-research/issues/detail?id=604
https://code.google.com/p/google-security-research/issues/detail?id=605
https://code.google.com/p/google-security-research/issues/detail?id=606
https://code.google.com/p/google-security-research/issues/detail?id=607
https://code.google.com/p/google-security-research/issues/detail?id=608
Common Vulnerability Exposure (CVE) ID: CVE-2016-1720
https://www.exploit-db.com/exploits/39367/
http://packetstormsecurity.com/files/135435/IOKit-Methods-Being-Called-Without-Locks-From-IOServiceClose.html
https://code.google.com/p/google-security-research/issues/detail?id=597
Common Vulnerability Exposure (CVE) ID: CVE-2016-1721
https://www.exploit-db.com/exploits/39358/
http://packetstormsecurity.com/files/135444/iOS-OS-X-Kernel-Uninitialized-Variable-Code-Execution.html
https://code.google.com/p/google-security-research/issues/detail?id=618
Common Vulnerability Exposure (CVE) ID: CVE-2016-1722
Common Vulnerability Exposure (CVE) ID: CVE-2016-1729
Common Vulnerability Exposure (CVE) ID: CVE-2015-7995
http://www.securityfocus.com/bid/77325
Debian Security Information: DSA-3605 (Google Search)
http://www.debian.org/security/2016/dsa-3605
http://www.openwall.com/lists/oss-security/2015/10/27/10
http://www.openwall.com/lists/oss-security/2015/10/28/4
http://www.securitytracker.com/id/1038623
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546
SuSE Security Announcement: openSUSE-SU-2016:1439 (Google Search)
http://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html
CopyrightCopyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 81291 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.