An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOAcceleratorFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

The remote host is running a version of macOS that is 10.13.x prior to 10.13.2. It is, therefore, affected by multiple vulnerabilities in the following components :

 - Apache
 - curl
 - Directory Utility
 - IOAcceleratorFamily
 - IOKit
 - Intel Graphics Driver
 - Kernel
 - Mail
 - Mail Drafts
 - OpenSSL
 - Screen Sharing Server

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components :

  - apache
  - curl
  - IOAcceleratorFamily
  - IOKit
  - Kernel
  - OpenSSL
  - Screen Sharing Server

The remote host is running a version of Mac OS X that is 10.13.x prior to 10.13.2. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache
  - curl
  - Directory Utility
  - IOAcceleratorFamily
  - IOKit
  - Intel Graphics Driver
  - Kernel
  - Mail
  - Mail Drafts
  - OpenSSL
  - Screen Sharing Server

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	Name	Product	Family	Severity
700513	macOS 10.13.x < 10.13.2 Multiple Vulnerabilities (Meltdown)	Nessus Network Monitor	Operating System Detection	critical
105081	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-002 and 2017-005)	Nessus	MacOS X Local Security Checks	high
105080	macOS 10.13.x < 10.13.2 Multiple Vulnerabilities (Meltdown)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2017-7159

high

Tenable Plugins

critical

high

high