PT-2021-8552 · Apple · Macos High Sierra

Published 2021-12-23 · Updated 2022-01-04 · CVE-2017-13835

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13

Description A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with elevated privileges.

Recommendations For versions prior to 10.13, update to macOS High Sierra 10.13 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-13835

Affected Products

Macos High Sierra

References · 4

• https://support.apple.com/en-us/HT208144 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13835 · Security Note
• https://osv.dev/vulnerability/CVE-2017-13835 · Vendor Advisory
• https://t.me/cibsecurity/34583 · Telegram Post