Mac OS X 10.11.x < 10.11.6 Multiple Vulnerabilities

critical Nessus Network Monitor Plugin ID 9441

Synopsis

The remote host is missing a critical Mac OS X patch update.

Description

The remote host is running a version of Mac OS X version 10.11.x prior to 10.11.6, and the following components contain vulnerabilities :

- ACMP4AACBaseDecoder
- Audio
- CFNetwork
- CoreGraphics
- DspFuncLib
- FaceTime
- Graphics
- IOHIDFamily
- IOSurface
- ImageIO
- Kernel
- QuickTime
- Safari
- Sandbox
- libxml2

Solution

Upgrade to Mac OS X 10.11.6 or later.

See Also

https://support.apple.com/en-us/HT206902

https://support.apple.com/en-us/HT206903

https://support.apple.com/en-us/HT206904

https://support.apple.com/en-us/HT206905

Plugin Details

Severity: Critical

ID: 9441

Published: 7/29/2016

Updated: 3/6/2019

Nessus ID: 92496, 93124

Risk Information

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C

Vulnerability Information

CPE: cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Patch Publication Date: 7/18/2016

Vulnerability Publication Date: 7/20/2016

Reference Information

CVE: CVE-2016-4447, CVE-2016-4448, CVE-2016-4449, CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, CVE-2016-4656, CVE-2016-4631, CVE-2016-4655, CVE-2016-4643, CVE-2016-4644, CVE-2016-4642, CVE-2016-4614, CVE-2016-4615, CVE-2016-4616, CVE-2016-4637, CVE-2016-4632, CVE-2016-4626, CVE-2016-1863, CVE-2016-4582, CVE-2016-4653, CVE-2016-1865, CVE-2016-4594, CVE-2016-4649, CVE-2016-4647, CVE-2016-4648, CVE-2016-4646, CVE-2014-9862, CVE-2016-4645, CVE-2016-4652, CVE-2016-4635, CVE-2016-4634, CVE-2016-4629, CVE-2016-4630, CVE-2016-4633, CVE-2016-4625, CVE-2016-4638, CVE-2016-4640, CVE-2016-4641, CVE-2016-4639, CVE-2016-4601, CVE-2016-4599, CVE-2016-4596, CVE-2016-4597, CVE-2016-4600, CVE-2016-4602, CVE-2016-4598, CVE-2016-4595, CVE-2016-4605, CVE-2016-4619, CVE-2016-4612

BID: 90865, 90864, 90856, 91824, 91834, 91826, 92652, 92653