Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable700032.PRM
HistoryMar 31, 2017 - 12:00 a.m.

Mac OS X 10.x < 10.12.4 Multiple Vulnerabilities

2017-03-3100:00:00
Tenable
www.tenable.com
48
JSON

The remote host is running a version of Mac OS X version 10.x prior to 10.12.4 , and is affected by multiple vulnerabilities :

  • A format string flaw exists that is triggered as string format specifiers (e.g. %s and %x) are not properly used when handling IPP(S) links. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2017-2403)
  • A flaw exists in the ‘SecKeyRawVerify()’ function that is triggered as parameters are not properly validated during the handling of cryptographic API call. This may allow a remote attacker to have an empty signature be accepted as valid. (CVE-2017-2423)
  • A type confusion flaw exists that is triggered as certain input is not properly validated when parsing specially crafted M4A audio files. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2017-2430)
  • A use-after-free flaw exists in ‘libc++’ that is triggered when demangling C++ applications. This may allow a malicious application to dereference already freed memory and potentially execute arbitrary code. (CVE-2017-2441)
  • A flaw exists as OTR packets are not properly validated. By spoofing the TLS/SSL server via a packet that appears valid, an attacker with the ability to intercept network traffic (e.g. MitM, DNS cache poisoning) can disclose and optionally manipulate transmitted data. (CVE-2017-2448)
  • An overflow condition exists that is triggered as certain input is not properly validated when parsing specially crafted M4A audio files. This may allow a context-dependent attacker to cause a heap-based buffer overflow, potentially allowing execution of arbitrary code. (CVE-2017-2462)
  • An unspecified flaw exists that is triggered as certain input is not properly validated when parsing X.509 certificates. This may allow a context dependent-attacker to corrupt memory and potentially execute arbitrary code. (CVE-2017-2485)

Additional flaws exist in the following components :

  • AppleGraphicsPowerManagement (CVE-2017-2421)
  • AppleRAID (CVE-2017-2438)
  • Bluetooth (CVE-2017-2420, CVE-2017-2427, CVE-2017-2449)
  • Carbon (CVE-2017-2379)
  • CoreGraphics (CVE-2017-2417)
  • CoreMedia (2017-2431)
  • CoreText (CVE-2017-2435, CVE-2017-2450, CVE-2017-2461)
  • EFI (CVE-2016-7585)
  • Finderkit (CVE-2017-2429)
  • FontParser (CVE-2017-2406, CVE-2017-2407, CVE-2017-2439, CVE-2017-2487)
  • Hypervisor (CVE-2017-2418)
  • iBooks (CVE-2017-2426)
  • IOATAFamily (CVE-2017-2408)
  • IOFireWireAVC (CVE-2017-2436, CVE-2017-2437)
  • IOFireWireFamily (CVE-2017-2388)
  • ImageIO (CVE-2017-2416, CVE-2017-2432, CVE-2017-2467)
  • Intel Graphics (CVE-2017-2443)
  • Kernel (CVE-2017-2398, CVE-2017-2401, CVE-2017-2410, 2017-2440, 2017-2456, CVE-2017-2472, CVE-2017-2473, CVE-2017-2474, CVE-2017-2478, CVE-2017-2482, CVE-2017-2483, CVE-2017-2489, CVE-2017-2490)
  • Keyboards (CVE-2017-2458)
  • libarchive (CVE-2017-2390)
  • libxslt (CVE-2017-2477)
  • MCX (CVE-2017-2402)
  • Menus (CVE-2017-2409)
  • Multi-touch (CVE-2017-2422)
  • nghttp2 (CVE-2017-2428)
  • QuickTime (2017-2413)
  • Security (2017-2451, 2017-6974)
  • SecurityFoundation (CVE-2017-2425)
  • sudo (CVE-2017-2381)
  • WebKit (CVE-2017-2392, CVE-2017-2457, CVE-2017-2486)
Binary data 700032.prm
VendorProductVersionCPE
applemac_os_xcpe:/o:apple:mac_os_x

References

Related

apple 10
nessus 9
openvas 5
cve 56
prion 56
zdt 11
seebug 13
ubuntucve 6
talos 1
debiancve 2
zdi 3
attackerkb 1
packetstorm 1
threatpost 1
avleonov 1
archlinux 1
ubuntu 1
mageia 1
gentoo 1
apple
apple
About the security content of watchOS 3.2 - Apple Support
2017-04-04 03:34:42
About the security content of watchOS 3.2
2017-03-27 00:00:00
About the security content of tvOS 10.2 - Apple Support
2017-06-20 10:43:59
nessus
nessus
Apple TV < 10.2 Multiple Vulnerabilities
2017-04-10 00:00:00
Apple TV < 10.2 Multiple Vulnerabilities
2017-04-02 00:00:00
macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)
2017-03-31 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities (HT207615)
2017-03-31 00:00:00
Apple Mac OS X 'libxslt' Multiple Vulnerabilities (HT207615)
2017-05-19 00:00:00
Apple Mac OS X Multiple Memory Corruption Vulnerabilities (HT207615)
2017-05-19 00:00:00
cve
cve
CVE-2016-7585
2017-04-02 01:59:00
CVE-2017-2489
2017-04-02 01:59:00
CVE-2017-2410
2017-04-02 01:59:00
prion
prion
Design/Logic Flaw
2017-04-02 01:59:00
Design/Logic Flaw
2017-04-02 01:59:00
Out-of-bounds
2017-04-02 01:59:00
zdt
zdt
macOS Kernel 10.12.2 (16C67) - Memory Disclosure Due to Lack of Bounds Checking in AppleIntelCapriCo
2017-04-05 00:00:00
macOS / iOS Kernel 10.12.3 (16D32) - SIOCGIFORDER Socket ioctl Off-by-One Memory Corruption
2017-04-04 00:00:00
macOS / iOS Kernel 10.12.3 (16D32) - bpf Heap Overflow Exploit
2017-04-05 00:00:00
seebug
seebug
MacOS kernel memory disclosure due to lack of bounds checking in AppleIntelCapriController::getDisplayPipeCapability(CVE-2017-2489)
2017-04-04 00:00:00
MacOS/iOS kernel memory corruption due to off-by-one in SIOCGIFORDER socket ioctl (CVE-2017-2474)
2017-04-04 00:00:00
MacOS/iOS kernel double free due to bad locking in fsevents device（CVE-2017-2490）
2017-04-04 00:00:00
ubuntucve
ubuntucve
CVE-2017-2486
2017-04-02 00:00:00
CVE-2017-2477
2017-04-02 00:00:00
CVE-2017-2392
2017-04-01 00:00:00
talos
talos
Apple OS X and iOS x509 certificate parsing Name Constraints Remote Code Execution Vulnerability
2017-03-09 00:00:00
debiancve
debiancve
CVE-2017-2392
2017-04-02 01:59:00
CVE-2017-2457
2017-04-02 01:59:00
zdi
zdi
Apple macOS M4A Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
2017-03-28 00:00:00
Apple macOS M4A Parsing Type Confusion Remote Code Execution Vulnerability
2017-03-28 00:00:00
Apple macOS ImageIO JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
2017-03-28 00:00:00
attackerkb
attackerkb
Remote code execution triggered by malformed GIF in ImageIO framework, affecting most iOS/macOS apps
2017-04-02 00:00:00
packetstorm
packetstorm
WebKit constructJSReadableStreamDefaultReader Type Confusion
2017-04-09 00:00:00
threatpost
threatpost
Macs Not Receiving EFI Firmware Security Updates as Expected
2017-09-29 08:00:07
avleonov
avleonov
Vulnerability Quadrants
2017-05-09 21:17:36
archlinux
archlinux
[ASA-201704-9] webkit2gtk: multiple issues
2017-04-28 00:00:00
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2017-04-10 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerability
2017-04-16 09:29:12
gentoo
gentoo
WebKitGTK+: Multiple vulnerabilities
2017-06-07 00:00:00
JSON
Related for 700032.PRM
apple10nessus9openvas5cve56prion56zdt11seebug13ubuntucve6talos1debiancve2zdi3attackerkb1packetstorm1threatpost1avleonov1archlinux1ubuntu1mageia1gentoo1