PT-2023-21612 · Apple · Apple Macos

Mickey Jin + 1 · CVE-2023-28179 · Publicado 2023-03-27 · Atualizado 2023-08-19

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.3

Description The issue was addressed with improved memory handling. Processing a maliciously crafted AppleScript binary may result in unexpected app termination or disclosure of process memory.

Recommendations For versions prior to 13.3, update to macOS Ventura 13.3 to resolve the issue. As a temporary workaround, consider avoiding the use of maliciously crafted AppleScript binaries until the update is applied.

Correção

Identificadores relacionados

CVE-2023-28179

Produtos afetados

Apple Macos

Referências · 7

• https://t.me/cibsecurity/68509 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-28179 · Nota de Segurança
• https://support.apple.com/en-us/HT213670 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1691226941834375170 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-28179 · Aviso do Fabricante
• https://t.me/cvenotify/56479 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1691248547776118784 · Publicação no Twitter