Mac OS X : Java for OS X 2013-005

The remote Mac OS X 10.7 or 10.8 host has a Java runtime that is missing the Java for OS X 2013-005 update, which updates the Java version to 1.6.065. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary...

Mac OS X Persistent Payload Installer

This module provides a persistent boot payload by creating a launch item, which can be a LaunchAgent or a LaunchDaemon. LaunchAgents run with user level permissions and are triggered upon login by a plist entry in /Library/LaunchAgents. LaunchDaemons run with elevated privilleges, and are launche...

Adobe Acrobat Installed (Mac OS X)

Binary data macosxadobeacrobatinstalled.nbin...

Microsoft Office Remote Code Execution Vulnerabilities-2885080 (Mac OS X)

This host is missing an important security update according to Microsoft Bulletin MS13-085. OpenVAS Vulnerability Test $Id: secpodms13-085macosx.nasl 4570 2016-11-18 10:17:05Z antu123 $ Microsoft Office Remote Code Execution Vulnerabilities-2885080 Mac OS X Authors: Antu Sanadi Copyright: Copyrig...

MS13-085: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by two memory corruption vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, it may be possible to leverage these issues to execute arbitrary code,...

Microsoft Silverlight Information Disclosure Vulnerability (2890788) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS13-087. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Office Remote Code Execution Vulnerabilities (2885080) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS13-085. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Acrobat Unsupported Version Detection (Mac OS X)

According to its self-reported version, the installation of Adobe Acrobat on the remote Mac OS X host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenab...

MS13-087: Vulnerability in Silverlight Could Allow Information Disclosure (2890788) (Mac OS X)

The version of Microsoft Silverlight installed on the remote host is reportedly affected by an information disclosure vulnerability due to its failure to properly handle certain objects in memory. If an attacker could trick a user on the affected system into visiting a website hosting a malicious...

Google Chrome Multiple Vulnerabilities-01 (Oct 2013) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Apple's own Encryption Mechanism allows hacker to create an Undetectable Mac OS X Malware

In the past, there was a general belief that Macs is much more secure than Windows PCs, but now Mac malware is a serious threat to the security of users' computers and information. One of the reasons behind the increase in Mac related Malware attacks is the fact that Apple products are popular wi...

Apple's own Encryption Mechanism allows hacker to create an Undetectable Mac OS X Malware

In the past, there was a general belief that Macs is much more secure than Windows PCs, but now Mac malware is a serious threat to the security of users’ computers and information. One of the reasons behind the increase in Mac related Malware attacks is the fact that Apple products are popular wi...

Apple Mac OS X multiple security vulnerabilities

Different vulnerabilities in multiple sustem components...

CVE-2013-5163

Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors...

Design/Logic Flaw

Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors...

CVE-2013-5163

Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors...

CVE-2013-5163

Apple Mac OS X: CVE-2013-5163 describes a vulnerability in Directory Services prior to OS X 10.8.5 Supplemental Update that allows a local user to bypass password validation and modify Directory Services records via unspecified vectors. The issue stems from a logic/credential verification flaw an...

PT-2013-5408

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Supplemental Update Description The issue allows local users to bypass password-based authentication and modify arbitrary Directory Services records. Recommendations For versions prior to 10.8.5...

CVE-2013-5163: Improper Authentication

Directory Services in Apple Mac OS X before 10.8.5 Supplemental Update allows local users to bypass password-based authentication and modify arbitrary Directory Services records via unspecified vectors...

Mac OS X 10.8 < 10.8.5 Supplemental Update

The remote host is running a version of Mac OS X 10.8 that is missing the OS X v10.8.5 Supplemental Update. This update fixes a logic issue in verification of authentication credentials by Directory Services, which could otherwise allow a local attacker to bypass password validation. TRUSTED...