CVE-2013-1027

Опубликовано: 16 сент. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Installer in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation after encountering a revoked certificate, which might allow user-assisted remote attackers to execute arbitrary code via a crafted package.

Ссылки

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
Patch
Vendor Advisory
http://support.apple.com/kb/HT5880
Patch
Vendor Advisory
http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
Patch
Vendor Advisory
http://support.apple.com/kb/HT5880
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.8.4 (включая)

cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00489

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-5q95-vpjh-32v5

github

больше 3 лет назад