PT-2013-5432

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue concerns the Screen Lock implementation, which does not immediately transition into the locked state when the Lock Screen command is given through the Keychain Status menu. Instead, it reli...

PT-2013-5433

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue concerns the Screen Lock implementation, which fails to require a password when transitioning out of hibernation, allowing physically proximate attackers to gain access to an unattended...

PT-2013-5411

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue is related to the Bluetooth USB host controller, which can be exploited by local users to cause a denial of service, resulting in a system crash. This can be achieved through a crafte...

PT-2013-5418

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is related to the random-number generator in the kernel, which provides lengthy exclusive access for processing large requests. This allows local users to cause a denial of service, resulti...

PT-2013-5415

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description A buffer underflow issue in CoreGraphics allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted PDF document...

PT-2013-5422

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue allows local users to cause a denial of service, resulting in a system panic, by utilizing an invalid iovec structure. Recommendations For versions prior to 10.9, update to version 10.9 or...

PT-2013-5423

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows context-dependent attackers to spoof file extensions via a crafted character sequence due to improper restriction of Unicode characters in filenames by LaunchServices...

Mac OS X : OS X Server < 3.0 Multiple Vulnerabilities

The remote Mac OS X host has a version of OS X Server installed that is prior to 3.0. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists in the included JSON Ruby Gem, which can be abused to exhaust all available memory resources. CVE-2013-026...

PT-2013-5417

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is related to the kernel in Mac OS X, which does not properly determine the output length for SHA-2 digest function calls. This allows attackers to cause a denial of service panic by...

PT-2013-5435

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is related to the improper implementation of certificate-revocation checks in Smart Card Services. This allows remote attackers to cause a denial of service, specifically a Smart Card usage...

PT-2013-5410

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue is related to the socketfilterfw in Application Firewall, which does not properly implement the --blockApp option. This allows remote attackers to bypass intended access restrictions...

PT-2013-5419

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is caused by an integer signedness error in the kernel, allowing local users to cause a denial of service, resulting in a system crash. This can be achieved via a crafted tty read operation...

Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.x that is prior to version 10.9. The newer version contains multiple security-related fixes for the following components : - Application Firewall - App Sandbox - Bluetooth - CFNetwork - CFNetwork SSL - Console - CoreGraphics - curl - dyld -...

Google Chrome Multiple Vulnerabilities-02 (Oct 2013) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Mac OS X : Apple Safari < 6.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.1. It is, therefore, potentially affected by several issues : - A bounds-checking issue exists related to handling XML files. CVE-2013-1036 - Multiple memory corruption vulnerabilities exist in WebKit...

VLC Media Player mp4a Denial of Service Vulnerability - Mac OS X

VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox XMLSerializer serializeToStream Use-after-free Vulnerability

Added: 10/17/2013 CVE: CVE-2013-0753 BID: 57209 OSVDB: 89021 Background Firefox is a freely available web browser for multiple platforms including Windows, Linux, and Mac OS. Problem Mozilla Firefox prior to 18.0 contains a use-after-free error in the XMLSerializer when the serializeToStream meth...

Mac OS X : Java for Mac OS X 10.6 Update 17

The remote Mac OS X host has a version of Java for Mac OS X 10.6 that is missing Update 17, which updates the Java version to 1.6.065. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the...

Mac OS X : Java for OS X 2013-005

The remote Mac OS X 10.7 or 10.8 host has a Java runtime that is missing the Java for OS X 2013-005 update, which updates the Java version to 1.6.065. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary...

Mac OS X Persistent Payload Installer

This module provides a persistent boot payload by creating a launch item, which can be a LaunchAgent or a LaunchDaemon. LaunchAgents run with user level permissions and are triggered upon login by a plist entry in /Library/LaunchAgents. LaunchDaemons run with elevated privilleges, and are launche...