PT-2011-2163 · Apple · Macos X

Jeff Mears · Publicado 2011-03-23 · Atualizado 2012-02-14 · CVE-2011-0182

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7

Description The issue is related to the i386 set ldt system call in the kernel, which does not properly handle call gates. This allows local users to gain privileges via vectors involving the creation of a call gate entry.

Recommendations For versions prior to 10.6.7, update to Mac OS X 10.6.7 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-0182

Produtos afetados

Macos X

Referências · 5

• 🔥 https://exploit-db.com/exploits/17901 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0182 · Nota de Segurança
• http://support.apple.com/kb/HT4581 · Aviso do Fabricante
• http://securityreason.com/securityalert/8402 · Nota
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html · Aviso do Fabricante