Описание
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "xar" component, which allows remote attackers to execute arbitrary code via a crafted archive that triggers use of uninitialized memory locations.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.12.1 (включая)
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.0051
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "xar" component, which allows remote attackers to execute arbitrary code via a crafted archive that triggers use of uninitialized memory locations.
fstec
почти 9 лет назад
Уязвимость операционной системы Mac OS X, позволяющая нарушителю выполнить произвольный код
EPSS
Процентиль: 66%
0.0051
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-20