ID de Prueba:	1.3.6.1.4.1.25623.1.0.806677
Categoría:	Mac OS X Local Security Checks
Título:	Apple Mac OS X Multiple Vulnerabilities-01 (Feb 2016)
Resumen:	Apple Mac OS X is prone to multiple vulnerabilities.
Descripción:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Multiple memory corruption errors in the parsing of disk images and IOHIDFamily API. - A type confusion error within libxslt. - Other multiple memory corruption errors. - An error when searching for scripting libraries. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary code, override OSA script libraries. Affected Software/OS: Apple Mac OS X versions 10.9.x through 10.9.5 prior to build 13F1603, 10.10.x through 10.10.5 prior to build 14F1605 and 10.11.x before 10.11.3 Solution: Upgrade Apple Mac OS X 10.11.x to version 10.11.3 or later or apply appropriate patch for Apple Mac OS X 10.9.x and 10.10.x. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1716 http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html http://www.securitytracker.com/id/1034736 Common Vulnerability Exposure (CVE) ID: CVE-2016-1717 http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2016-1718 http://zerodayinitiative.com/advisories/ZDI-16-020/ Common Vulnerability Exposure (CVE) ID: CVE-2016-1719 https://www.exploit-db.com/exploits/39359/ https://www.exploit-db.com/exploits/39360/ https://www.exploit-db.com/exploits/39361/ https://www.exploit-db.com/exploits/39362/ https://www.exploit-db.com/exploits/39363/ https://www.exploit-db.com/exploits/39364/ http://packetstormsecurity.com/files/135438/iOS-Kernel-IOReportHub-Use-After-Free.html http://packetstormsecurity.com/files/135439/iOS-Kernel-IOHIDEventService-Use-After-Free.html http://packetstormsecurity.com/files/135440/iOS-Kernel-AppleOscarCMA-Use-After-Free.html http://packetstormsecurity.com/files/135441/iOS-Kernel-AppleOscarCompass-Use-After-Free.html http://packetstormsecurity.com/files/135442/iOS-Kernel-AppleOscarAccelerometer-Use-After-Free.html http://packetstormsecurity.com/files/135443/iOS-Kernel-AppleOscarGyro-Use-After-Free.html https://code.google.com/p/google-security-research/issues/detail?id=603 https://code.google.com/p/google-security-research/issues/detail?id=604 https://code.google.com/p/google-security-research/issues/detail?id=605 https://code.google.com/p/google-security-research/issues/detail?id=606 https://code.google.com/p/google-security-research/issues/detail?id=607 https://code.google.com/p/google-security-research/issues/detail?id=608 Common Vulnerability Exposure (CVE) ID: CVE-2016-1720 https://www.exploit-db.com/exploits/39367/ http://packetstormsecurity.com/files/135435/IOKit-Methods-Being-Called-Without-Locks-From-IOServiceClose.html https://code.google.com/p/google-security-research/issues/detail?id=597 Common Vulnerability Exposure (CVE) ID: CVE-2016-1721 https://www.exploit-db.com/exploits/39358/ http://packetstormsecurity.com/files/135444/iOS-OS-X-Kernel-Uninitialized-Variable-Code-Execution.html https://code.google.com/p/google-security-research/issues/detail?id=618 Common Vulnerability Exposure (CVE) ID: CVE-2016-1722 Common Vulnerability Exposure (CVE) ID: CVE-2016-1729 Common Vulnerability Exposure (CVE) ID: CVE-2015-7995 BugTraq ID: 77325 http://www.securityfocus.com/bid/77325 Debian Security Information: DSA-3605 (Google Search) http://www.debian.org/security/2016/dsa-3605 http://www.openwall.com/lists/oss-security/2015/10/27/10 http://www.openwall.com/lists/oss-security/2015/10/28/4 http://www.securitytracker.com/id/1038623 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546 SuSE Security Announcement: openSUSE-SU-2016:1439 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.