HPSBHF02946

http://nvidia.custhelp.com/app/answers/detail/a_id/3377

http://support.apple.com/kb/HT6150

The remote host is running a version of Mac OS X that is older than 10.9.2. The newer version contains numerous security-related fixes for the following components :

  - Apache

  - ATS

  - Certificate Trust Policy

  - CoreAnimation

  - CoreText

  - curl

  - Data Security

  - Date and Time

  - File Bookmark

  - Finder

  - ImageIO

  - NVIDIA Drivers

  - PHP

  - QuickLook

  - QuickTime

An attacker could leverage the most serious of these issues to execute arbitrary code.

The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-001 applied. This update contains several security-related fixes for the following components :

  - Apache
  - App Sandbox
  - ATS
  - Certificate Trust Policy
  - CFNetwork Cookies
  - CoreAnimation
  - Date and Time
  - File Bookmark
  - ImageIO
  - IOSerialFamily
  - LaunchServices
  - NVIDIA Drivers
  - PHP
  - QuickLook
  - QuickTime
  - Secure Transport

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.2. This update contains several security-related fixes for the following components :

  - Apache
  - ATS
  - Certificate Trust Policy
  - CoreAnimation
  - CoreText
  - curl
  - Data Security
  - Date and Time
  - File Bookmark
  - Finder
  - ImageIO
  - NVIDIA Drivers
  - PHP
  - QuickLook
  - QuickTime

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

The remote host has a driver installed that is affected by an unspecified, local privilege escalation vulnerability.  Using the vulnerability, it may be possible for a local attacker to gain complete control of the system.

The remote host is affected by the vulnerability described in GLSA-201402-02 (NVIDIA Drivers: Privilege Escalation)

    The vulnerability is caused due to the driver allowing unprivileged       user-mode software to access the GPU.
  Impact :

    A local attacker could gain escalated privileges.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
8138	Mac OS X < 10.9.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	critical
72688	Mac OS X Multiple Vulnerabilities (Security Update 2014-001) (BEAST)	Nessus	MacOS X Local Security Checks	critical
72687	Mac OS X 10.9.x < 10.9.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
72484	NVIDIA Graphics Driver Unspecified Privilege Escalation (Unix / Linux)	Nessus	Misc.	high
72483	NVIDIA Graphics Driver Unspecified Privilege Escalation (Windows)	Nessus	Windows	high
72255	GLSA-201402-02 : NVIDIA Drivers: Privilege Escalation	Nessus	Gentoo Local Security Checks	critical

CVE-2013-5987

HIGH

Description

References

Details

Risk Information

CVSS v2.0

Vulnerable Software

Configuration 1

Configuration 2

Tenable Plugins

critical

critical

critical

high

high

critical