Lucene search

PRIOn knowledge basePRION:CVE-2011-3227

HistoryOct 14, 2011 - 10:55 a.m.

Code injection

2011-10-1410:55:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.2%

JSON

libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extension in a Certificate Revocation list (CRL), which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) a crafted (1) web site or (2) e-mail message.

CPENameOperatorVersion
mac_os_xeq10.5.8
mac_os_xeq10.4.3
mac_os_xeq10.6.8
mac_os_xeq10.2.5
mac_os_xeq10.6.7
mac_os_xeq10.2.7
mac_os_xeq10.0.2
mac_os_xeq10.2.8
mac_os_xeq10.2.1
mac_os_xeq10.5.6

Name	Operator	Version
mac_os_x	eq	10.5.8
mac_os_x	eq	10.4.3
mac_os_x	eq	10.6.8
mac_os_x	eq	10.2.5
mac_os_x	eq	10.6.7
mac_os_x	eq	10.2.7
mac_os_x	eq	10.0.2
mac_os_x	eq	10.2.8
mac_os_x	eq	10.2.1
mac_os_x	eq	10.5.6

Rows per page:

1-10 of 1361

References

lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

support.apple.com/kb/HT5002

www.securityfocus.com/bid/50085

8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.2%

JSON

Related for PRION:CVE-2011-3227