Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2013-5170 (GCVE-0-2013-5170)
Vulnerability from cvelistv5 – Published: 2013-10-24 01:00 – Updated: 2024-08-06 17:06
VLAI?
EPSS
Summary
Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T17:06:52.157Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "APPLE-SA-2014-04-22-1",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
},
{
"name": "APPLE-SA-2013-10-22-3",
"tags": [
"vendor-advisory",
"x_refsource_APPLE",
"x_transferred"
],
"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2013-10-22T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2014-04-23T03:57:00",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"name": "APPLE-SA-2014-04-22-1",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
},
{
"name": "APPLE-SA-2013-10-22-3",
"tags": [
"vendor-advisory",
"x_refsource_APPLE"
],
"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "product-security@apple.com",
"ID": "CVE-2013-5170",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "APPLE-SA-2014-04-22-1",
"refsource": "APPLE",
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
},
{
"name": "APPLE-SA-2013-10-22-3",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2013-5170",
"datePublished": "2013-10-24T01:00:00",
"dateReserved": "2013-08-15T00:00:00",
"dateUpdated": "2024-08-06T17:06:52.157Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:*:supplemental_update:*:*:*:*:*:*\", \"versionEndIncluding\": \"10.8.5\", \"matchCriteriaId\": \"BA9ABDE2-A7F3-4D0B-9BBB-57F27AE14B1D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B2082D62-3821-4DBA-8690-67489F44C38D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F0DB1BC-DC16-423E-B0C7-8E9C996A50B5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E59315BA-B9F1-46A5-86E7-8BE2ED97BA4F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"55841123-F78F-42E0-8D40-C688C4B4D29C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"252640D3-5CB8-4C3D-9E8B-ED452293C805\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F3D30B4B-DA63-40B0-B0C9-F3992CF25706\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.\"}, {\"lang\": \"es\", \"value\": \"Buffer underflow en CoreGraphics de Apple Mac OS X anterior a la versi\\u00f3n 10.9 permite a atacantes remotos ejecutar c\\u00f3digo arbitrario o provocar una denegaci\\u00f3n de servicio (cuelgue de la aplicaci\\u00f3n) a trav\\u00e9s de un documento PDF dise\\u00f1ado.\"}]",
"id": "CVE-2013-5170",
"lastModified": "2024-11-21T01:57:08.963",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2013-10-24T03:48:49.080",
"references": "[{\"url\": \"http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html\", \"source\": \"product-security@apple.com\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "product-security@apple.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2013-5170\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2013-10-24T03:48:49.080\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.\"},{\"lang\":\"es\",\"value\":\"Buffer underflow en CoreGraphics de Apple Mac OS X anterior a la versi\u00f3n 10.9 permite a atacantes remotos ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (cuelgue de la aplicaci\u00f3n) a trav\u00e9s de un documento PDF dise\u00f1ado.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:*:supplemental_update:*:*:*:*:*:*\",\"versionEndIncluding\":\"10.8.5\",\"matchCriteriaId\":\"BA9ABDE2-A7F3-4D0B-9BBB-57F27AE14B1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2082D62-3821-4DBA-8690-67489F44C38D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F0DB1BC-DC16-423E-B0C7-8E9C996A50B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E59315BA-B9F1-46A5-86E7-8BE2ED97BA4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"55841123-F78F-42E0-8D40-C688C4B4D29C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"252640D3-5CB8-4C3D-9E8B-ED452293C805\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3D30B4B-DA63-40B0-B0C9-F3992CF25706\"}]}]}],\"references\":[{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html\",\"source\":\"product-security@apple.com\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
CERTFR-2014-AVI-201
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | Apple TV 6.1.1 | ||
| Apple | N/A | Apple OS X Lion versions 10.7.5 et antérieures | ||
| Apple | N/A | Apple iOS 7.1.1 | ||
| Apple | N/A | Apple OS X Lion Server versions 10.7.5 et antérieures | ||
| Apple | N/A | Apple OS X Mountain Lion versions 10.8.5 et antérieures | ||
| Apple | N/A | Apple AirPort Base Station Firmware Update 7.7.3 | ||
| Apple | N/A | Apple OS X Mountain Lion Server versions 10.8.5 et antérieures | ||
| Apple | N/A | Apple OS X Mavericks versions 10.9.2 et antérieures |
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple TV 6.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Lion versions 10.7.5 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple iOS 7.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Lion Server versions 10.7.5 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Mountain Lion versions 10.8.5 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple AirPort Base Station Firmware Update 7.7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Mountain Lion Server versions 10.8.5 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Mavericks versions 10.9.2 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2014-1320",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1320"
},
{
"name": "CVE-2014-1312",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1312"
},
{
"name": "CVE-2013-4164",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4164"
},
{
"name": "CVE-2014-1298",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1298"
},
{
"name": "CVE-2014-0160",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0160"
},
{
"name": "CVE-2014-1313",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1313"
},
{
"name": "CVE-2013-6393",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
},
{
"name": "CVE-2014-1296",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1296"
},
{
"name": "CVE-2014-1302",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1302"
},
{
"name": "CVE-2013-5170",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5170"
},
{
"name": "CVE-2014-1304",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1304"
},
{
"name": "CVE-2014-1311",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1311"
},
{
"name": "CVE-2014-1300",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1300"
},
{
"name": "CVE-2014-1305",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1305"
},
{
"name": "CVE-2014-1713",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1713"
},
{
"name": "CVE-2014-1307",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1307"
},
{
"name": "CVE-2014-1314",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1314"
},
{
"name": "CVE-2014-1299",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1299"
},
{
"name": "CVE-2014-1295",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1295"
},
{
"name": "CVE-2014-1322",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1322"
},
{
"name": "CVE-2014-1319",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1319"
},
{
"name": "CVE-2014-1318",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1318"
},
{
"name": "CVE-2014-1310",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1310"
},
{
"name": "CVE-2014-1321",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1321"
},
{
"name": "CVE-2014-1303",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1303"
},
{
"name": "CVE-2014-1309",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1309"
},
{
"name": "CVE-2014-1316",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1316"
},
{
"name": "CVE-2014-1308",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1308"
},
{
"name": "CVE-2013-2871",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2871"
},
{
"name": "CVE-2014-1315",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1315"
}
],
"links": [],
"reference": "CERTFR-2014-AVI-201",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2014-04-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eApple\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\nd\u00e9ni de service \u00e0 distance et un contournement de la politique de\ns\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6209 du 22 avril 2014",
"url": "http://support.apple.com/kb/HT6209"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6207 du 22 avril 2014",
"url": "http://support.apple.com/kb/HT6207"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6203 du 22 avril 2014",
"url": "http://support.apple.com/kb/HT6203"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6208 du 22 avril 2014",
"url": "http://support.apple.com/kb/HT6208"
}
]
}
CERTFR-2014-AVI-231
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Apple OS X Mavericks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Versions antérieures à OS X Mavericks v10.9.3
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eVersions ant\u00e9rieures \u00e0 OS X Mavericks v10.9.3\u003c/P\u003e",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2014-1320",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1320"
},
{
"name": "CVE-2013-4164",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4164"
},
{
"name": "CVE-2013-6393",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
},
{
"name": "CVE-2014-1296",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1296"
},
{
"name": "CVE-2013-5170",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5170"
},
{
"name": "CVE-2014-1314",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1314"
},
{
"name": "CVE-2014-1295",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1295"
},
{
"name": "CVE-2014-1322",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1322"
},
{
"name": "CVE-2014-1319",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1319"
},
{
"name": "CVE-2014-1318",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1318"
},
{
"name": "CVE-2014-1321",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1321"
},
{
"name": "CVE-2014-1316",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1316"
},
{
"name": "CVE-2014-1315",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1315"
}
],
"links": [],
"reference": "CERTFR-2014-AVI-231",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2014-05-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple OS X Mavericks\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple OS X Mavericks",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 15 mai 2014",
"url": "http://support.apple.com/kb/HT6246"
}
]
}
CERTFR-2014-AVI-231
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Apple OS X Mavericks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Versions antérieures à OS X Mavericks v10.9.3
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eVersions ant\u00e9rieures \u00e0 OS X Mavericks v10.9.3\u003c/P\u003e",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2014-1320",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1320"
},
{
"name": "CVE-2013-4164",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4164"
},
{
"name": "CVE-2013-6393",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
},
{
"name": "CVE-2014-1296",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1296"
},
{
"name": "CVE-2013-5170",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5170"
},
{
"name": "CVE-2014-1314",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1314"
},
{
"name": "CVE-2014-1295",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1295"
},
{
"name": "CVE-2014-1322",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1322"
},
{
"name": "CVE-2014-1319",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1319"
},
{
"name": "CVE-2014-1318",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1318"
},
{
"name": "CVE-2014-1321",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1321"
},
{
"name": "CVE-2014-1316",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1316"
},
{
"name": "CVE-2014-1315",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1315"
}
],
"links": [],
"reference": "CERTFR-2014-AVI-231",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2014-05-16T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple OS X Mavericks\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple OS X Mavericks",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 15 mai 2014",
"url": "http://support.apple.com/kb/HT6246"
}
]
}
CERTA-2013-AVI-601
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Apple OS X Mavericks. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un contournement de la politique de sécurité et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Versions antérieures à OS X Mavericks v10.9
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eVersions ant\u00e9rieures \u00e0 OS X Mavericks v10.9\u003c/P\u003e",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2013-5188",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5188"
},
{
"name": "CVE-2013-4073",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4073"
},
{
"name": "CVE-2013-0249",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0249"
},
{
"name": "CVE-2013-5190",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5190"
},
{
"name": "CVE-2013-1667",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1667"
},
{
"name": "CVE-2013-5167",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5167"
},
{
"name": "CVE-2013-5172",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5172"
},
{
"name": "CVE-2013-1944",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1944"
},
{
"name": "CVE-2013-5182",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5182"
},
{
"name": "CVE-2013-5191",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5191"
},
{
"name": "CVE-2013-5175",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5175"
},
{
"name": "CVE-2013-3954",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-3954"
},
{
"name": "CVE-2012-1150",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1150"
},
{
"name": "CVE-2013-5174",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5174"
},
{
"name": "CVE-2013-5186",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5186"
},
{
"name": "CVE-2013-5176",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5176"
},
{
"name": "CVE-2013-5170",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5170"
},
{
"name": "CVE-2012-0876",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0876"
},
{
"name": "CVE-2013-5135",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5135"
},
{
"name": "CVE-2013-5187",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5187"
},
{
"name": "CVE-2013-5192",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5192"
},
{
"name": "CVE-2013-5184",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5184"
},
{
"name": "CVE-2012-0845",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0845"
},
{
"name": "CVE-2013-5185",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5185"
},
{
"name": "CVE-2013-5183",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5183"
},
{
"name": "CVE-2013-5168",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5168"
},
{
"name": "CVE-2013-5145",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5145"
},
{
"name": "CVE-2013-5173",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5173"
},
{
"name": "CVE-2013-5142",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5142"
},
{
"name": "CVE-2013-5166",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5166"
},
{
"name": "CVE-2013-5169",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5169"
},
{
"name": "CVE-2013-5189",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5189"
},
{
"name": "CVE-2013-5177",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5177"
},
{
"name": "CVE-2013-5141",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5141"
},
{
"name": "CVE-2013-5139",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5139"
},
{
"name": "CVE-2013-3950",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-3950"
},
{
"name": "CVE-2013-5180",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5180"
},
{
"name": "CVE-2013-5171",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5171"
},
{
"name": "CVE-2013-5181",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5181"
},
{
"name": "CVE-2013-5165",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5165"
},
{
"name": "CVE-2011-3427",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3427"
},
{
"name": "CVE-2011-4944",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4944"
},
{
"name": "CVE-2013-5179",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5179"
},
{
"name": "CVE-2013-5138",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5138"
},
{
"name": "CVE-2011-2391",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2391"
},
{
"name": "CVE-2011-3389",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3389"
},
{
"name": "CVE-2013-5178",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5178"
}
],
"links": [],
"reference": "CERTA-2013-AVI-601",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2013-10-24T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple OS X Mavericks\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire, un\ncontournement de la politique de s\u00e9curit\u00e9 et une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple OS X Mavericks",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6011 du 22 octobre 2013",
"url": "http://support.apple.com/kb/HT6011"
}
]
}
CERTA-2013-AVI-601
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Apple OS X Mavericks. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un contournement de la politique de sécurité et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Versions antérieures à OS X Mavericks v10.9
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eVersions ant\u00e9rieures \u00e0 OS X Mavericks v10.9\u003c/P\u003e",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2013-5188",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5188"
},
{
"name": "CVE-2013-4073",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4073"
},
{
"name": "CVE-2013-0249",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0249"
},
{
"name": "CVE-2013-5190",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5190"
},
{
"name": "CVE-2013-1667",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1667"
},
{
"name": "CVE-2013-5167",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5167"
},
{
"name": "CVE-2013-5172",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5172"
},
{
"name": "CVE-2013-1944",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1944"
},
{
"name": "CVE-2013-5182",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5182"
},
{
"name": "CVE-2013-5191",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5191"
},
{
"name": "CVE-2013-5175",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5175"
},
{
"name": "CVE-2013-3954",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-3954"
},
{
"name": "CVE-2012-1150",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1150"
},
{
"name": "CVE-2013-5174",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5174"
},
{
"name": "CVE-2013-5186",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5186"
},
{
"name": "CVE-2013-5176",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5176"
},
{
"name": "CVE-2013-5170",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5170"
},
{
"name": "CVE-2012-0876",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0876"
},
{
"name": "CVE-2013-5135",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5135"
},
{
"name": "CVE-2013-5187",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5187"
},
{
"name": "CVE-2013-5192",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5192"
},
{
"name": "CVE-2013-5184",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5184"
},
{
"name": "CVE-2012-0845",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0845"
},
{
"name": "CVE-2013-5185",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5185"
},
{
"name": "CVE-2013-5183",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5183"
},
{
"name": "CVE-2013-5168",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5168"
},
{
"name": "CVE-2013-5145",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5145"
},
{
"name": "CVE-2013-5173",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5173"
},
{
"name": "CVE-2013-5142",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5142"
},
{
"name": "CVE-2013-5166",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5166"
},
{
"name": "CVE-2013-5169",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5169"
},
{
"name": "CVE-2013-5189",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5189"
},
{
"name": "CVE-2013-5177",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5177"
},
{
"name": "CVE-2013-5141",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5141"
},
{
"name": "CVE-2013-5139",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5139"
},
{
"name": "CVE-2013-3950",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-3950"
},
{
"name": "CVE-2013-5180",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5180"
},
{
"name": "CVE-2013-5171",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5171"
},
{
"name": "CVE-2013-5181",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5181"
},
{
"name": "CVE-2013-5165",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5165"
},
{
"name": "CVE-2011-3427",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3427"
},
{
"name": "CVE-2011-4944",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4944"
},
{
"name": "CVE-2013-5179",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5179"
},
{
"name": "CVE-2013-5138",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5138"
},
{
"name": "CVE-2011-2391",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2391"
},
{
"name": "CVE-2011-3389",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3389"
},
{
"name": "CVE-2013-5178",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5178"
}
],
"links": [],
"reference": "CERTA-2013-AVI-601",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2013-10-24T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple OS X Mavericks\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire, un\ncontournement de la politique de s\u00e9curit\u00e9 et une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple OS X Mavericks",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6011 du 22 octobre 2013",
"url": "http://support.apple.com/kb/HT6011"
}
]
}
CERTFR-2014-AVI-201
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | Apple TV 6.1.1 | ||
| Apple | N/A | Apple OS X Lion versions 10.7.5 et antérieures | ||
| Apple | N/A | Apple iOS 7.1.1 | ||
| Apple | N/A | Apple OS X Lion Server versions 10.7.5 et antérieures | ||
| Apple | N/A | Apple OS X Mountain Lion versions 10.8.5 et antérieures | ||
| Apple | N/A | Apple AirPort Base Station Firmware Update 7.7.3 | ||
| Apple | N/A | Apple OS X Mountain Lion Server versions 10.8.5 et antérieures | ||
| Apple | N/A | Apple OS X Mavericks versions 10.9.2 et antérieures |
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple TV 6.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Lion versions 10.7.5 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple iOS 7.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Lion Server versions 10.7.5 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Mountain Lion versions 10.8.5 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple AirPort Base Station Firmware Update 7.7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Mountain Lion Server versions 10.8.5 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple OS X Mavericks versions 10.9.2 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2014-1320",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1320"
},
{
"name": "CVE-2014-1312",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1312"
},
{
"name": "CVE-2013-4164",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4164"
},
{
"name": "CVE-2014-1298",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1298"
},
{
"name": "CVE-2014-0160",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0160"
},
{
"name": "CVE-2014-1313",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1313"
},
{
"name": "CVE-2013-6393",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-6393"
},
{
"name": "CVE-2014-1296",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1296"
},
{
"name": "CVE-2014-1302",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1302"
},
{
"name": "CVE-2013-5170",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5170"
},
{
"name": "CVE-2014-1304",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1304"
},
{
"name": "CVE-2014-1311",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1311"
},
{
"name": "CVE-2014-1300",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1300"
},
{
"name": "CVE-2014-1305",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1305"
},
{
"name": "CVE-2014-1713",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1713"
},
{
"name": "CVE-2014-1307",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1307"
},
{
"name": "CVE-2014-1314",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1314"
},
{
"name": "CVE-2014-1299",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1299"
},
{
"name": "CVE-2014-1295",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1295"
},
{
"name": "CVE-2014-1322",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1322"
},
{
"name": "CVE-2014-1319",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1319"
},
{
"name": "CVE-2014-1318",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1318"
},
{
"name": "CVE-2014-1310",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1310"
},
{
"name": "CVE-2014-1321",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1321"
},
{
"name": "CVE-2014-1303",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1303"
},
{
"name": "CVE-2014-1309",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1309"
},
{
"name": "CVE-2014-1316",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1316"
},
{
"name": "CVE-2014-1308",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1308"
},
{
"name": "CVE-2013-2871",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-2871"
},
{
"name": "CVE-2014-1315",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-1315"
}
],
"links": [],
"reference": "CERTFR-2014-AVI-201",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2014-04-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eApple\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\nd\u00e9ni de service \u00e0 distance et un contournement de la politique de\ns\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6209 du 22 avril 2014",
"url": "http://support.apple.com/kb/HT6209"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6207 du 22 avril 2014",
"url": "http://support.apple.com/kb/HT6207"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6203 du 22 avril 2014",
"url": "http://support.apple.com/kb/HT6203"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT6208 du 22 avril 2014",
"url": "http://support.apple.com/kb/HT6208"
}
]
}
FKIE_CVE-2013-5170
Vulnerability from fkie_nvd - Published: 2013-10-24 03:48 - Updated: 2025-04-11 00:51
Severity ?
Summary
Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:supplemental_update:*:*:*:*:*:*",
"matchCriteriaId": "BA9ABDE2-A7F3-4D0B-9BBB-57F27AE14B1D",
"versionEndIncluding": "10.8.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B2082D62-3821-4DBA-8690-67489F44C38D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8F0DB1BC-DC16-423E-B0C7-8E9C996A50B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E59315BA-B9F1-46A5-86E7-8BE2ED97BA4F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*",
"matchCriteriaId": "55841123-F78F-42E0-8D40-C688C4B4D29C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "252640D3-5CB8-4C3D-9E8B-ED452293C805",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F3D30B4B-DA63-40B0-B0C9-F3992CF25706",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document."
},
{
"lang": "es",
"value": "Buffer underflow en CoreGraphics de Apple Mac OS X anterior a la versi\u00f3n 10.9 permite a atacantes remotos ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (cuelgue de la aplicaci\u00f3n) a trav\u00e9s de un documento PDF dise\u00f1ado."
}
],
"id": "CVE-2013-5170",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2013-10-24T03:48:49.080",
"references": [
{
"source": "product-security@apple.com",
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
},
{
"source": "product-security@apple.com",
"tags": [
"Vendor Advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html"
}
],
"sourceIdentifier": "product-security@apple.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-587G-C4FM-P47Q
Vulnerability from github – Published: 2022-05-17 04:46 – Updated: 2022-05-17 04:46
VLAI?
Details
Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
{
"affected": [],
"aliases": [
"CVE-2013-5170"
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2013-10-24T03:48:00Z",
"severity": "MODERATE"
},
"details": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.",
"id": "GHSA-587g-c4fm-p47q",
"modified": "2022-05-17T04:46:00Z",
"published": "2022-05-17T04:46:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5170"
},
{
"type": "WEB",
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
},
{
"type": "WEB",
"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2013-5170
Vulnerability from gsd - Updated: 2023-12-13 01:22Details
Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2013-5170",
"description": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.",
"id": "GSD-2013-5170"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2013-5170"
],
"details": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.",
"id": "GSD-2013-5170",
"modified": "2023-12-13T01:22:21.716482Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "product-security@apple.com",
"ID": "CVE-2013-5170",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "APPLE-SA-2014-04-22-1",
"refsource": "APPLE",
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
},
{
"name": "APPLE-SA-2013-10-22-3",
"refsource": "APPLE",
"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:supplemental_update:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "10.8.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "product-security@apple.com",
"ID": "CVE-2013-5170"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "APPLE-SA-2013-10-22-3",
"refsource": "APPLE",
"tags": [
"Vendor Advisory"
],
"url": "http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html"
},
{
"name": "APPLE-SA-2014-04-22-1",
"refsource": "APPLE",
"tags": [],
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
}
},
"lastModifiedDate": "2014-04-24T04:58Z",
"publishedDate": "2013-10-24T03:48Z"
}
}
}
VAR-201310-0482
Vulnerability from variot - Updated: 2023-12-18 11:42Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. Apple Mac OS X is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Note: This issue was previously covered in BID 63282(Apple Mac OS X APPLE-SA-2013-10-22-3 Multiple Security Vulnerabilities), but has been given its own record to better document it. Versions prior Mac OS X 10.9 are vulnerable. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
APPLE-SA-2014-04-22-1 Security Update 2014-002
Security Update 2014-002 is now available and addresses the following:
CFNetwork HTTPProtocol Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2 Impact: An attacker in a privileged network position can obtain web site credentials Description: Set-Cookie HTTP headers would be processed even if the connection closed before the header line was complete. An attacker could strip security settings from the cookie by forcing the connection to close before the security settings were sent, and then obtain the value of the unprotected cookie. This issue was addressed by ignoring incomplete HTTP header lines. CVE-ID CVE-2014-1296 : Antoine Delignat-Lavaud of Prosecco at Inria Paris
CoreServicesUIAgent Available for: OS X Mavericks v10.9.2 Impact: Visiting a maliciously crafted website or URL may result in an unexpected application termination or arbitrary code execution Description: A format string issue existed in the handling of URLs. This issue was addressed through additional validation of URLs. This issue was addressed through additional bounds checking. This issue was addressed through additional validation of ASN.1 data. This issue was addressed through improved bounds checking. CVE-ID CVE-2014-1319 : Cristian Draghici of Modulo Consulting, Karl Smith of NCC Group
Intel Graphics Driver Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2 Impact: A malicious application can take control of the system Description: A validation issue existed in the handling of a pointer from userspace. This issue was addressed through additional validation of pointers. CVE-ID CVE-2014-1318 : Ian Beer of Google Project Zero working with HP's Zero Day Initiative
IOKit Kernel Available for: OS X Mavericks v10.9.2 Impact: A local user can read kernel pointers, which can be used to bypass kernel address space layout randomization Description: A set of kernel pointers stored in an IOKit object could be retrieved from userland. This issue was addressed through removing the pointers from the object. CVE-ID CVE-2014-1320 : Ian Beer of Google Project Zero working with HP's Zero Day Initiative
Kernel Available for: OS X Mavericks v10.9.2 Impact: A local user can read a kernel pointer, which can be used to bypass kernel address space layout randomization Description: A kernel pointer stored in a XNU object could be retrieved from userland. This issue was addressed through removing the pointer from the object. CVE-ID CVE-2014-1322 : Ian Beer of Google Project Zero
Power Management Available for: OS X Mavericks v10.9.2 Impact: The screen might not lock Description: If a key was pressed or the trackpad touched just after the lid was closed, the system might have tried to wake up while going to sleep, which would have caused the screen to be unlocked. This issue was addressed by ignoring keypresses while going to sleep. CVE-ID CVE-2014-1321 : Paul Kleeberg of Stratis Health Bloomington MN, Julian Sincu at the Baden-Wuerttemberg Cooperative State University (DHBW Stuttgart), Gerben Wierda of R&A, Daniel Luz
Ruby Available for: OS X Mavericks v10.9.2 Impact: Running a Ruby script that handles untrusted YAML tags may lead to an unexpected application termination or arbitrary code execution Description: An integer overflow issue existed in LibYAML's handling of YAML tags. This issue was addressed through additional validation of YAML tags. CVE-ID CVE-2013-6393
Ruby Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2 Impact: Running a Ruby script that uses untrusted input to create a Float object may lead to an unexpected application termination or arbitrary code execution Description: A heap-based buffer overflow issue existed in Ruby when converting a string to a floating point value. This issue was addressed through additional validation of floating point values. CVE-ID CVE-2013-4164
Security - Secure Transport Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2 Impact: An attacker with a privileged network position may capture data or change the operations performed in sessions protected by SSL Description: In a 'triple handshake' attack, it was possible for an attacker to establish two connections which had the same encryption keys and handshake, insert the attacker's data in one connection, and renegotiate so that the connections may be forwarded to each other. To prevent attacks based on this scenario, Secure Transport was changed so that, by default, a renegotiation must present the same server certificate as was presented in the original connection. CVE-ID CVE-2014-1295 : Antoine Delignat-Lavaud, Karthikeyan Bhargavan and Alfredo Pironti of Prosecco at Inria Paris
WindowServer Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2 Impact: Maliciously crafted applications can execute arbitrary code outside the sandbox Description: WindowServer sessions could be created by sandboxed applications. This issue was addressed by disallowing sandboxed applications from creating WindowServer sessions. CVE-ID CVE-2014-1314 : KeenTeam working with HP's Zero Day Initiative
Note: Security Update 2014-002 for OS X Mavericks systems includes the security content of Safari 7.0.3: http://support.apple.com/kb/HT6181
Security Update 2014-002 may be obtained via the Apple Software Update application, and from the Apple's Software Downloads web site: http://www.apple.com/support/downloads/
Information will also be posted to the Apple Security Updates web site: http://support.apple.com/kb/HT1222
This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org
iQIcBAEBAgAGBQJTVqgEAAoJEPefwLHPlZEw0L8P/RIqgQPc1/RnmPBCKVnZ0QyI 8V9jV07LyXTPySL3at/sAFac148ZYqu9cSKtRWB1oAQCnC8C20EIDLBvsysmKT/a zqLUP8ZGcd4jC4UYUleVgl4U9SXkp0L/HwpASXeRHGeUd/tN4eCBEgDfKSMdm8/s 4S70gTQPRRsQR3D8RkcOITJVFCaDFy/em3AbEJyAm7yDsDOinJdRrirRe7W1Q/p6 KBOmQYb73m0ykg08jgCjohxhTE9gpNeMeR7smN+7GsRb6XFlUOJGtnlePyLm1hN3 85e0KRnQyhTGXJ7y6MTmKzzwJ6/iVZvEeXK1IFwXEkwLLmp5uhp7wfT3DkZZSnBm +uo5g2aSQ80+7ZR9psUQwXOn8/6cFyKbG5tHxkh8IY6qLacvHP5yBcw3gqlUNPg5 2vCNWqhL8fEqncx7K1QC8CxwLQMVw9QnolukdjOxT66+kI0F/mDGeGdf/mYkGBJF ZECjWZsoekGq4TMu75MPn8BlwFpaLnObPi9pC+56BDhEz7f39bqBvkAaW61cQgj4 lRwlEHWNBFlO9XVkQwdmYrZoaeAAVxGG+iPt225dmXXZtWGMs5nYIzPj8GzRoNWQ gYAGZAOBr6pGJCQmfJIy4tLKj0H9za9pxX9RqavKrZyEtTcxpUmrh91mGZiI4eo0 7hmpILk22+6xv6pWCw8D =WWPv -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201310-0482",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mac os x",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.8.5"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.8.3"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.8.4"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.8.1"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.8.2"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 1.6,
"vendor": "apple",
"version": "10.8.0"
},
{
"model": "mac os x",
"scope": "lte",
"trust": 1.0,
"vendor": "apple",
"version": "10.8.5"
},
{
"model": "mac os x",
"scope": "lt",
"trust": 0.8,
"vendor": "apple",
"version": "10.9 (coregraphics)"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.8.5 (fontparser)"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"db": "NVD",
"id": "CVE-2013-5170"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:supplemental_update:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "10.8.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2013-5170"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Will Dormann of the CERT/CC",
"sources": [
{
"db": "BID",
"id": "63330"
}
],
"trust": 0.3
},
"cve": "CVE-2013-5170",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 6.8,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2013-5170",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-65172",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2013-5170",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201310-581",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-65172",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2013-5170",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-65172"
},
{
"db": "VULMON",
"id": "CVE-2013-5170"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"db": "NVD",
"id": "CVE-2013-5170"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document. Apple Mac OS X is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. \nAn attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. \nNote: This issue was previously covered in BID 63282(Apple Mac OS X APPLE-SA-2013-10-22-3 Multiple Security Vulnerabilities), but has been given its own record to better document it. \nVersions prior Mac OS X 10.9 are vulnerable. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\nAPPLE-SA-2014-04-22-1 Security Update 2014-002\n\nSecurity Update 2014-002 is now available and addresses the\nfollowing:\n\nCFNetwork HTTPProtocol\nAvailable for: OS X Lion v10.7.5, OS X Lion Server v10.7.5,\nOS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2\nImpact: An attacker in a privileged network position can obtain web\nsite credentials\nDescription: Set-Cookie HTTP headers would be processed even if the\nconnection closed before the header line was complete. An attacker\ncould strip security settings from the cookie by forcing the\nconnection to close before the security settings were sent, and then\nobtain the value of the unprotected cookie. This issue was addressed\nby ignoring incomplete HTTP header lines. \nCVE-ID\nCVE-2014-1296 : Antoine Delignat-Lavaud of Prosecco at Inria Paris\n\nCoreServicesUIAgent\nAvailable for: OS X Mavericks v10.9.2\nImpact: Visiting a maliciously crafted website or URL may result in\nan unexpected application termination or arbitrary code execution\nDescription: A format string issue existed in the handling of URLs. \nThis issue was addressed through additional validation of URLs. This issue was addressed through additional bounds\nchecking. This issue was addressed through additional validation of ASN.1\ndata. This issue was addressed through improved bounds\nchecking. \nCVE-ID\nCVE-2014-1319 : Cristian Draghici of Modulo Consulting, Karl Smith of\nNCC Group\n\nIntel Graphics Driver\nAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2\nImpact: A malicious application can take control of the system\nDescription: A validation issue existed in the handling of a pointer\nfrom userspace. This issue was addressed through additional\nvalidation of pointers. \nCVE-ID\nCVE-2014-1318 : Ian Beer of Google Project Zero working with HP\u0027s\nZero Day Initiative\n\nIOKit Kernel\nAvailable for: OS X Mavericks v10.9.2\nImpact: A local user can read kernel pointers, which can be used to\nbypass kernel address space layout randomization\nDescription: A set of kernel pointers stored in an IOKit object\ncould be retrieved from userland. This issue was addressed through\nremoving the pointers from the object. \nCVE-ID\nCVE-2014-1320 : Ian Beer of Google Project Zero working with HP\u0027s\nZero Day Initiative\n\nKernel\nAvailable for: OS X Mavericks v10.9.2\nImpact: A local user can read a kernel pointer, which can be used to\nbypass kernel address space layout randomization\nDescription: A kernel pointer stored in a XNU object could be\nretrieved from userland. This issue was addressed through removing\nthe pointer from the object. \nCVE-ID\nCVE-2014-1322 : Ian Beer of Google Project Zero\n\nPower Management\nAvailable for: OS X Mavericks v10.9.2\nImpact: The screen might not lock\nDescription: If a key was pressed or the trackpad touched just after\nthe lid was closed, the system might have tried to wake up while\ngoing to sleep, which would have caused the screen to be unlocked. \nThis issue was addressed by ignoring keypresses while going to sleep. \nCVE-ID\nCVE-2014-1321 : Paul Kleeberg of Stratis Health Bloomington MN,\nJulian Sincu at the Baden-Wuerttemberg Cooperative State University\n(DHBW Stuttgart), Gerben Wierda of R\u0026A, Daniel Luz\n\nRuby\nAvailable for: OS X Mavericks v10.9.2\nImpact: Running a Ruby script that handles untrusted YAML tags may\nlead to an unexpected application termination or arbitrary code\nexecution\nDescription: An integer overflow issue existed in LibYAML\u0027s handling\nof YAML tags. This issue was addressed through additional validation\nof YAML tags. \nCVE-ID\nCVE-2013-6393\n\nRuby\nAvailable for: OS X Lion v10.7.5, OS X Lion Server v10.7.5,\nOS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2\nImpact: Running a Ruby script that uses untrusted input to create a\nFloat object may lead to an unexpected application termination or\narbitrary code execution\nDescription: A heap-based buffer overflow issue existed in Ruby when\nconverting a string to a floating point value. This issue was\naddressed through additional validation of floating point values. \nCVE-ID\nCVE-2013-4164\n\nSecurity - Secure Transport\nAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2\nImpact: An attacker with a privileged network position may capture\ndata or change the operations performed in sessions protected by SSL\nDescription: In a \u0027triple handshake\u0027 attack, it was possible for an\nattacker to establish two connections which had the same encryption\nkeys and handshake, insert the attacker\u0027s data in one connection, and\nrenegotiate so that the connections may be forwarded to each other. \nTo prevent attacks based on this scenario, Secure Transport was\nchanged so that, by default, a renegotiation must present the same\nserver certificate as was presented in the original connection. \nCVE-ID\nCVE-2014-1295 : Antoine Delignat-Lavaud, Karthikeyan Bhargavan and\nAlfredo Pironti of Prosecco at Inria Paris\n\nWindowServer\nAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2\nImpact: Maliciously crafted applications can execute arbitrary code\noutside the sandbox\nDescription: WindowServer sessions could be created by sandboxed\napplications. This issue was addressed by disallowing sandboxed\napplications from creating WindowServer sessions. \nCVE-ID\nCVE-2014-1314 : KeenTeam working with HP\u0027s Zero Day Initiative\n\nNote: Security Update 2014-002 for OS X Mavericks systems includes\nthe security content of Safari 7.0.3:\nhttp://support.apple.com/kb/HT6181\n\nSecurity Update 2014-002 may be obtained via the Apple Software\nUpdate application, and from the Apple\u0027s Software Downloads web\nsite: http://www.apple.com/support/downloads/\n\nInformation will also be posted to the Apple Security Updates\nweb site: http://support.apple.com/kb/HT1222\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG/MacGPG2 v2.0.22 (Darwin)\nComment: GPGTools - http://gpgtools.org\n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\n7hmpILk22+6xv6pWCw8D\n=WWPv\n-----END PGP SIGNATURE-----\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-5170"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"db": "BID",
"id": "63330"
},
{
"db": "VULHUB",
"id": "VHN-65172"
},
{
"db": "VULMON",
"id": "CVE-2013-5170"
},
{
"db": "PACKETSTORM",
"id": "126269"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-5170",
"trust": 3.0
},
{
"db": "JVN",
"id": "JVNVU95174988",
"trust": 0.8
},
{
"db": "JVN",
"id": "JVNVU95860341",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004841",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201310-581",
"trust": 0.7
},
{
"db": "APPLE",
"id": "APPLE-SA-2013-10-22-3",
"trust": 0.6
},
{
"db": "BID",
"id": "63330",
"trust": 0.5
},
{
"db": "VULHUB",
"id": "VHN-65172",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2013-5170",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "126269",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-65172"
},
{
"db": "VULMON",
"id": "CVE-2013-5170"
},
{
"db": "BID",
"id": "63330"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"db": "PACKETSTORM",
"id": "126269"
},
{
"db": "NVD",
"id": "CVE-2013-5170"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
]
},
"id": "VAR-201310-0482",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-65172"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T11:42:06.077000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "APPLE-SA-2013-10-22-3",
"trust": 0.8,
"url": "http://lists.apple.com/archives/security-announce/2013/oct/msg00004.html"
},
{
"title": "HT6207",
"trust": 0.8,
"url": "http://support.apple.com/kb/ht6207"
},
{
"title": "HT6011",
"trust": 0.8,
"url": "http://support.apple.com/kb/ht6011"
},
{
"title": "HT6207",
"trust": 0.8,
"url": "http://support.apple.com/kb/ht6207?viewlocale=ja_jp"
},
{
"title": "HT6011",
"trust": 0.8,
"url": "http://support.apple.com/kb/ht6011?viewlocale=ja_jp"
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/0xcybery/cve-t4pdf "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2013-5170"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-65172"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"db": "NVD",
"id": "CVE-2013-5170"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html"
},
{
"trust": 1.8,
"url": "http://lists.apple.com/archives/security-announce/2013/oct/msg00004.html"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-5170"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnvu95174988/"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu95860341/index.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-5170"
},
{
"trust": 0.3,
"url": "http://www.apple.com/macosx/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/119.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.securityfocus.com/bid/63330"
},
{
"trust": 0.1,
"url": "https://github.com/0xcybery/cve-t4pdf"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-5170"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1315"
},
{
"trust": 0.1,
"url": "http://www.apple.com/support/downloads/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-6393"
},
{
"trust": 0.1,
"url": "http://support.apple.com/kb/ht6181"
},
{
"trust": 0.1,
"url": "https://www.apple.com/support/security/pgp/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1295"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1314"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1316"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1319"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1320"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1322"
},
{
"trust": 0.1,
"url": "http://support.apple.com/kb/ht1222"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1296"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1318"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-1321"
},
{
"trust": 0.1,
"url": "http://gpgtools.org"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-4164"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-65172"
},
{
"db": "VULMON",
"id": "CVE-2013-5170"
},
{
"db": "BID",
"id": "63330"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"db": "PACKETSTORM",
"id": "126269"
},
{
"db": "NVD",
"id": "CVE-2013-5170"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-65172"
},
{
"db": "VULMON",
"id": "CVE-2013-5170"
},
{
"db": "BID",
"id": "63330"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"db": "PACKETSTORM",
"id": "126269"
},
{
"db": "NVD",
"id": "CVE-2013-5170"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-10-24T00:00:00",
"db": "VULHUB",
"id": "VHN-65172"
},
{
"date": "2013-10-24T00:00:00",
"db": "VULMON",
"id": "CVE-2013-5170"
},
{
"date": "2013-10-22T00:00:00",
"db": "BID",
"id": "63330"
},
{
"date": "2013-10-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"date": "2014-04-23T00:00:30",
"db": "PACKETSTORM",
"id": "126269"
},
{
"date": "2013-10-24T03:48:49.080000",
"db": "NVD",
"id": "CVE-2013-5170"
},
{
"date": "2013-10-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-04-24T00:00:00",
"db": "VULHUB",
"id": "VHN-65172"
},
{
"date": "2014-04-24T00:00:00",
"db": "VULMON",
"id": "CVE-2013-5170"
},
{
"date": "2014-04-23T00:39:00",
"db": "BID",
"id": "63330"
},
{
"date": "2014-04-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-004841"
},
{
"date": "2014-04-24T04:58:21.687000",
"db": "NVD",
"id": "CVE-2013-5170"
},
{
"date": "2013-11-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Apple Mac OS X of CoreGraphics Vulnerable to buffer underflow",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-004841"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201310-581"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…