PT-2010-1883 · Apple · Macos X+1

Bayard Bell + 2 · Published 2010-03-30 · Updated 2010-03-31 · CVE-2010-0058

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions ClamAV in Apple Mac OS X version 10.5.8 with Security Update 2009-005

Description The issue is related to freshclam in ClamAV, where an incorrect launchd.plist ProgramArguments key causes it not to run. This might allow remote attackers to introduce viruses into the system.

Recommendations For ClamAV in Apple Mac OS X version 10.5.8 with Security Update 2009-005, update the launchd.plist file to include the correct ProgramArguments key to ensure freshclam runs properly.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2010-0058

Affected Products

Clamav

Macos X

References · 3

• http://support.apple.com/kb/HT4077 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0058 · Security Note
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html · Vendor Advisory