Mac OS X 10.x < 10.12.5 Multiple Vulnerabilities
Critical Nessus Network Monitor Plugin ID 700119
Synopsis
The remote host is running a version of Mac OS X that is affected by multiple attack vectors.
Description
The remote host is running a version of Mac OS X version 10.x prior to 10.12.5, and is affected by multiple vulnerabilities :
- An overflow condition exists in the '_XGetWindowMovementGroup()' function within the WindowServer component that is triggered as certain input is not properly validated. This may allow a local attacker to cause a stack-based buffer overflow and potentially execute arbitrary code with the privileges of WindowServer. (OSVDB 157557)
- An unspecified flaw exists in the Intel graphics driver. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel-level privileges. (OSVDB 157576)
- An unspecified flaw exists in the NVIDIA graphics drivers. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel-level privileges. (OSVDB 157577)
- A flaw exists in the speechsynthesisd service, as unsigned dynamic libraries (.dylib) are improperly validated before being loaded. This may allow a local attacker to bypass an application's sandbox and execute arbitrary code with elevated privileges. (OSVDB 157598)
- An unspecified flaw exists in the Speech Framework. This may allow an attacker to escape an application sandbox. (OSVDB 157599)
- A certificate validation flaw exists in 802.1X authentication that is triggered in EAP-TLS when a certificate has changed. This may allow a context-dependent attacker to disclose user network credentials. (OSVDB 157607)
- A type confusion flaw exists in SQLite that is triggered as certain input related to 'snippet' is not properly validated. With specially crafted web content, a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (OSVDB 158290, OSVDB 158291, OSVDB 158292)
This product is also affected by vulnerabilities found in the following components:
- Accessibility (OSVDB 157580)
- CoreAnimation (OSVDB 157568)
- CoreAudio (OSVDB 157552)
- CoreFoundation (OSVDB 157894)
- DiskArbitration (OSVDB 157570)
- Foundation (OSVDB 157895)
- HFS (OSVDB 157567)
- iBooks (OSVDB 157548, OSVDB 157551, OSVDB 157581)
- IOSurface (OSVDB 157550)
- Kernel (OSVDB 157547, OSVDB 157549, OSVDB 157554, OSVDB 157571, OSVDB 157572, OSVDB 157574, OSVDB 157575, )
- Multi-Touch (OSVDB 157578, OSVDB 157579)
- SQLite (OSVDB 157561, OSVDB 157562, OSVDB 157563, OSVDB 157564, OSVDB 157565, OSVDB 157560)
- Sandbox (OSVDB 157583)
- Security (OSVDB 157606)
- TextInput (OSVDB 157553)
- WindowServer (OSVDB 157556, OSVDB 157558, OSVDB 157597)
Solution
Upgrade to Mac OS X 10.12.5 or later.