CVE-2017-7032

HIGH

Description

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

References

http://www.securityfocus.com/bid/99882

http://www.securitytracker.com/id/1038951

https://support.apple.com/HT207922

Details

Source: MITRE

Published: 2017-07-20

Updated: 2017-07-24

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 8.6

Severity: HIGH

CVSS v3.0

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions up to 10.12.5 (inclusive)

Tenable Plugins

View all (2 total)

IDNameProductFamilySeverity
700170Mac OS X 10.x < 10.12.6 Multiple VulnerabilitiesNessus Network MonitorOperating System Detection
critical
101957macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-003)NessusMacOS X Local Security Checks
high