Detections
Analytics

Mac OS X Multiple Vulnerabilities (Security Update 2004-08-09)

medium Nessus Plugin ID 14242

Synopsis

The remote host is missing a Mac OS X update that fixes a security issue.

Description

The remote host is missing Security Update 2004-08-09.

libpng is a library used for manipulating graphics files. Several buffer overflows have been discovered in libpng. A remote attacker could exploit these vulnerabilities by tricking a user into opening a maliciously crafted PNG file, resulting in the execution of arbitrary code.

Solution

Install Security Update 2004-08-09.

See Also

http://www.nessus.org/u?210abeb5

Plugin Details

Severity: Medium

ID: 14242

File Name: macosx_SecUpd20040809.nasl

Version: 1.18

Type: local

Agent: macosx

Published: 8/10/2004

Updated: 5/28/2024

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x:10.2, cpe:/o:apple:mac_os_x:10.3

Required KB Items: Host/MacOSX/packages

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 8/9/2004

Vulnerability Publication Date: 12/14/2002

Reference Information

CVE: CVE-2002-1363, CVE-2004-0421, CVE-2004-0597, CVE-2004-0598, CVE-2004-0599

BID: 10857