7.6

CVE-2011-1516

Exploit
The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Apple events to the launchd daemon, a related issue to CVE-2008-7303.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS X Version 10.5.0
Apple ≫ macOS X Version 10.5.1
Apple ≫ macOS X Version 10.5.2
Apple ≫ macOS X Version 10.5.3
Apple ≫ macOS X Version 10.5.4
Apple ≫ macOS X Version 10.5.5
Apple ≫ macOS X Version 10.5.6
Apple ≫ macOS X Version 10.5.7
Apple ≫ macOS X Version 10.5.8
Apple ≫ macOS X Version 10.6.0
Apple ≫ macOS X Version 10.6.1
Apple ≫ macOS X Version 10.6.2
Apple ≫ macOS X Version 10.6.3
Apple ≫ macOS X Version 10.6.4
Apple ≫ macOS X Version 10.6.5
Apple ≫ macOS X Version 10.6.6
Apple ≫ macOS X Version 10.6.7
Apple ≫ macOS X Version 10.6.8
Apple ≫ macOS X Version 10.7.0
Apple ≫ macOS X Version 10.7.1
Apple ≫ macOS X Version 10.7.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.53% 0.878
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.coresecurity.com/content/apple-osx-sandbox-bypass
Exploit
http://www.securityfocus.com/archive/1/520479/100/100/threaded