EUVD-2017-5339

Malware in sbrugna...

CVE-2017-13824

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Open Scripting Architecture" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted AppleScript file that is mishandle...

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Open Scripting Architecture" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted AppleScript file that is mishandle...

CVE-2017-13824

CVE-2017-13824 (Apple macOS Open Scripting Architecture) is an Apple macOS High Sierra issue affecting macOS versions before 10.13.1. A crafted AppleScript file mishandled by osadecompile can lead to remote arbitrary code execution or memory corruption, per the NVD description. Connected Apple/Ha...

CVE-2017-13824

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Open Scripting Architecture" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted AppleScript file that is mishandle...

CVE-2017-13824: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Open Scripting Architecture" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted AppleScript file that is mishandle...

PT-2017-13136

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.1 Description The issue involves the Open Scripting Architecture component, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted AppleScript file that is mishandled by...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-001 and 2017-004)

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - 802.1X - apache - AppleScript - ATS - Audio - CFString - CoreText - curl - Dictionary Widget - file - Font...

Apple macOS High Sierra Open Scripting Architecture Code Execution Vulnerability

Apple macOS High Sierra is a proprietary operating system developed by Apple for Mac computers.Open Scripting Architecture is one of the script creation components. A security vulnerability exists in the Open Scripting Architecture component in Apple macOS High Sierra versions prior to 10.13.1. T...

January 2016 Apple Security Patches iOS, OS X, Safari

Apple on Tuesday released security patches for iOS, OS X and an update for the Safari browser. The patches come less than a week after a ShmooCon presentation by Synack director of research Patrick Wardle revealed that Apple’s Gatekeeper security feature in OS X can be bypassed by an attacker wit...

Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. One or more of the following components are affected: Open Scripting Architecture BIND CarbonCore CoreGraphics Data Detectors Engine Disk Utility OpenLDAP OpenSSL PHP QuickLook rsync OpenVAS Vulnerability Test Mac OS X Security Update 2008-005...

Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Design/Logic Flaw

Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of scripting addition plugins, which allows local users to gain privileges via scripting addition commands to a privileged application, as originally...

CVE-2008-2830

The CVE-2008-2830 entry describes a local privilege-escalation flaw in Apple Mac OS X (notably 10.4.11 and 10.5.4, plus some other 10.4/10.5 builds), where the Open Scripting Architecture fails to properly restrict loading of scripting addition plugins. This allows a local user to gain privileges...

CVE-2008-2830

Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of scripting addition plugins, which allows local users to gain privileges via scripting addition commands to a privileged application, as originally...

CVE-2008-2830: Undefined Security Weakness

Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of scripting addition plugins, which allows local users to gain privileges via scripting addition commands to a privileged application, as originally...