PT-2008-5513 · Apple · Macos X

Richard Van Eeden · Publicado 2008-12-17 · Atualizado 2011-03-08 · CVE-2008-4218

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Mac OS X versions prior to 10.5.6

Description: The issue is related to multiple integer overflows in the kernel on Intel platforms, which can be exploited by local users to gain privileges. This can be achieved through crafted calls to specific functions, including (1) i386 set ldt or (2) i386 get ldt.

Recommendations: For Mac OS X versions prior to 10.5.6, update to version 10.5.6 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-4218

Produtos afetados

Macos X

Referências · 9

• http://securitytracker.com/id?1021403 · Nota
• http://support.apple.com/kb/HT3338 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html · Aviso do Fabricante
• http://securityfocus.com/bid/32879 · Nota
• http://us-cert.gov/cas/techalerts/TA08-350A.html · Nota
• http://secunia.com/advisories/33179 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/3444 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4218 · Nota de Segurança
• http://securityfocus.com/bid/32839 · Nota