iPhoto < 6.0.6

medium Nessus Plugin ID 24812

Synopsis

The remote system is missing a security update

Description

The remote host is running a version of iPhoto 6 that is older than version 6.0.6. As such, it contains a security vulnerability that may allow an attacker to execute arbitrary code on this host.

To exploit this flaw, an attacker would need to lure a user on the remote host into subscribing to a malicious photocast album

Solution

http://docs.info.apple.com/article.html?artnum=305215

Plugin Details

Severity: Medium

ID: 24812

File Name: macosx_iphoto606.nasl

Version: 1.20

Type: local

Agent: macosx

Family: MacOS X Local Security Checks

Published: 3/13/2007

Updated: 11/27/2023

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2007-0051

Vulnerability Information

CPE: cpe:/a:apple:iphoto

Required KB Items: Host/MacOSX/packages

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/19/2005

Vulnerability Publication Date: 1/4/2007

Reference Information

CVE: CVE-2007-0051

BID: 21871

Detections

Analytics