Detections
Analytics

Mac OS X 10.9.x < 10.9.5 Multiple Vulnerabilities

critical Nessus Plugin ID 77748

Language:

Synopsis

The remote host is missing a Mac OS X update that fixes multiple vulnerabilities.

Description

The remote host is running a version of Mac OS X 10.9.x that is prior to version 10.9.5. This update contains several security-related fixes for the following components :

 - apache_mod_php
 - Bluetooth
 - CoreGraphics
 - Foundation
 - Intel Graphics Driver
 - IOAcceleratorFamily
 - IOHIDFamily
 - IOKit
 - Kernel
 - Libnotify
 - OpenSSL
 - QT Media Foundation
 - ruby

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Solution

Upgrade to Mac OS X 10.9.5 or later.

See Also

http://www.securityfocus.com/archive/1/533483/30/0/threaded

http://support.apple.com/kb/HT6443

http://osdir.com/ml/general/2014-09/msg34124.html

Plugin Details

Severity: Critical

ID: 77748

File Name: macosx_10_9_5.nasl

Version: 1.9

Type: combined

Agent: macosx

Published: 9/18/2014

Updated: 7/14/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/18/2014

Vulnerability Publication Date: 12/31/2011

Exploitable With

Core Impact

Reference Information

CVE: CVE-2013-7345, CVE-2014-0076, CVE-2014-0185, CVE-2014-0195, CVE-2014-0207, CVE-2014-0221, CVE-2014-0224, CVE-2014-0237, CVE-2014-0238, CVE-2014-1391, CVE-2014-1943, CVE-2014-2270, CVE-2014-2525, CVE-2014-3470, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, CVE-2014-3515, CVE-2014-3981, CVE-2014-4049, CVE-2014-4350, CVE-2014-4374, CVE-2014-4376, CVE-2014-4377, CVE-2014-4378, CVE-2014-4379, CVE-2014-4381, CVE-2014-4388, CVE-2014-4389, CVE-2014-4390, CVE-2014-4393, CVE-2014-4394, CVE-2014-4395, CVE-2014-4396, CVE-2014-4397, CVE-2014-4398, CVE-2014-4399, CVE-2014-4400, CVE-2014-4401, CVE-2014-4402, CVE-2014-4403, CVE-2014-4416, CVE-2014-4979

BID: 65596, 66002, 66363, 66406, 66478, 67118, 67759, 67765, 67837, 67898, 67899, 67900, 67901, 68007, 68120, 68237, 68238, 68239, 68241, 68243, 68852, 69888, 69891, 69892, 69893, 69894, 69895, 69896, 69897, 69898, 69901, 69903, 69905, 69906, 69907, 69908, 69910, 69915, 69916, 69921, 69925, 69931, 69948, 69950

APPLE-SA: APPLE-SA-2014-09-17-3