PT-2011-3183 · Apple · Osascript+2

Published 2011-11-15 · Updated 2018-10-09 · CVE-2011-1516

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5.x through 10.7.x

Description The issue concerns the kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles, which fail to propagate restrictions to all created processes. This allows remote attackers to access network resources by using a crafted application. For example, an attacker can use osascript to send Apple events to the launchd daemon.

Recommendations For Mac OS X versions 10.5.x through 10.7.x, consider restricting access to the launchd daemon and limiting the use of osascript to send Apple events as a temporary workaround until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-1516

Affected Products

Macos X

Launchd

Osascript

References · 4

• 🔥 https://exploit-db.com/exploits/18853 · Exploit
• 🔥 http://coresecurity.com/content/apple-osx-sandbox-bypass · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-1516 · Security Note
• http://securityfocus.com/archive/1/520479/100/100/threaded · Note