Lucene search

K
myhack58佚名MYHACK58:62201786247
HistoryMay 19, 2017 - 12:00 a.m.

Apple is not bulletproof, recently released multiple patches to fix security vulnerabilities-vulnerability warning-the black bar safety net

2017-05-1900:00:00
佚名
www.myhack58.com
23

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

61.2%

When Windows users are worried about theoperating systemto suffer want to cry ransomware worm hijacking, Apple users also have the peace of mind that malware attacks do nothing don’t them. But the actual is not so, Apple products are not bulletproof, an e-book you can black out the Mac, iPhone and iPad.
On Monday, Apple for iOS, macOS, Safari, tvOS, iCloud, iTunes and watchOS released a software update that fixes a total of 69 vulnerabilities, many vulnerabilities can be used in on the affected system to execute remote code.
! [](/Article/UploadPic/2017-5/201751951628968. png? www. myhack58. com)
Which contains multiple exploits for the pwn2own contest, The number of manufacturers participating when using the vulnerability. iPhone, iPad and iPod: iOS 10.3.2
Apple iPhone, iPad and iPod Touch mobileoperating systemiOS 10.3. 2 solve 41 Safety defects, 23 of which a defect exists in WebKit, including 17 remote code execution vulnerabilities and 5 a cross-site scripting vulnerability.
In addition, iOS 10.3.2 also solves the iOS version of the iBook in the two vulnerabilities (CVE-2017-2497 and CVE-2017-6981), the vulnerability as is the use of can lead to by ebooks to open any website, and with root privileges execute malicious code.
iOS 10.3.2 solve the problem also includes the AVE Video Coding in a memory corruption problem, it can lead to a malicious application to obtain kernel-level privileges; but also to solve the designed to deal with untrusted certificate to the certificate trust policy in the certificate validation issue.
Apple users can iOS device connected to iTunes or directly download and install iOS 10.3.2 solve these problems.
El Capitan and Yosemite: the macOS Sierra 10.12.5
Apple’s Mac operating system macOS Sierra 10.12. 5 has resolved a total of 37 vulnerabilities, including the iBook, can lead to extend the root privileges, execute arbitrary code several vulnerabilities, and another one could cause the application to escape the security sandbox issues.
In addition to solve the problems also include the ability to steal network credentials of the wireless network, due to the Myrtle and grace WDI (Nvidia) graphics card driving privilege escalation issues as well as the SOLite in the four arbitrary code execution flaws.
Mac users through the Apple App Store→update path to download updates, or macOS Sierra user Sierra 10.12.5 as a separate update download, OS X EI Captain the user can from here download, OS X Yosemite users point this download.
!
Apple browser: Safari 10.1.1
Safari 10.1. 1 addresses 26 security issues, of which 23 exist in WebKit; and many of the problems have been in the iOS 10.3.2 repair. The remaining three issues in the Safari browser repair. The user can manually download a Safari 10.1.1 update.
Apple watch: watchOS 3.2.2
Apple watch users should install to fix 12 security vulnerabilities watchOS 3.2.2。 An attacker can use four vulnerabilities in the affected device to execute remote code. Apple watch users can watch connected to the charger and on the iPhone open the Apple watch app→my watch tab→General→Software Update download watchOS 3.2.2。
Apple TV: tvOS 10.2.1
Apple also released tvOS 10.2. 1 solve 23 questions, 12 of which vulnerability exists in the WebKit engine, could allow an attacker on the target device to perform cross-site scripting attacks and remote code execution attacks. tvOS 10.2.1 update directly from the Apple TV download setting→System→Update software.
Windows: iTunes 12.6.1 and iCloud 6.2.1
At the same time, Apple has to use iTunes and iCloud to Windows users to publish a patch. iTunes 12.6.1 and iCloud 6.2.1 fix the Windows 7 and after versions of a remote code execution vulnerability.
Suggest Apple users update as soon as Apple products and Safari all theoperating system, in order to prevent suffering from the criminals attack. Automatic updates can also be applied to the patch.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

61.2%

Related for MYHACK58:62201786247