CERTA-2004-AVI-111
Vulnerability from certfr_avis - Published: - Updated:
Plusieurs vulnérabilités affectent différents composants de Mac OS X.
Description
Apple propose une mise à jour de sécurité pour différentes versions de MacOS X. Cette mise à jour est relative à des vulnérabilités concernant plusieurs composants de MacOS X :
- Serveur d'impression CUPS : CAN-2004-0382 ;
- exécution de code arbitraire par la bilbliothèque de gestion des formats XML, libxml2 : CAN-2004-0110 ;
- gestion des messages contenant du HTML dans le client Mail : CAN-2004-0383 ;
- risque de déni de service dans la bibliothèque SSL/TLS, OpenSSL : CAN-2004-0079 et CAN-2004-0112.
Solution
Appliquer le correctif en utilisant la mise à jour de logiciels ou en consultant les liens suivants :
-
MacOS X 10.2.8 :
http://www.apple.com/support/downloads/securityupdate_2004-04-05_(10_2_8).html -
MacOS X 10.3.3 :
http://www.apple.com/support/downloads/securityupdate_2004-04-05_(10_3_3).html
MacOS X versions 10.3.3 et 10.2.8.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eMacOS X versions 10.3.3 et 10.2.8.\u003c/p\u003e",
"content": "## Description\n\nApple propose une mise \u00e0 jour de s\u00e9curit\u00e9 pour diff\u00e9rentes versions de\nMacOS X. Cette mise \u00e0 jour est relative \u00e0 des vuln\u00e9rabilit\u00e9s concernant\nplusieurs composants de MacOS X :\n\n- Serveur d\u0027impression CUPS : CAN-2004-0382 ;\n- ex\u00e9cution de code arbitraire par la bilblioth\u00e8que de gestion des\n formats XML, libxml2 : CAN-2004-0110 ;\n- gestion des messages contenant du HTML dans le client Mail :\n CAN-2004-0383 ;\n- risque de d\u00e9ni de service dans la biblioth\u00e8que SSL/TLS, OpenSSL :\n CAN-2004-0079 et CAN-2004-0112.\n\n## Solution\n\nAppliquer le correctif en utilisant la mise \u00e0 jour de logiciels ou en\nconsultant les liens suivants :\n\n- MacOS X 10.2.8 :\n\n http://www.apple.com/support/downloads/securityupdate_2004-04-05_(10_2_8).html\n\n- MacOS X 10.3.3 :\n\n http://www.apple.com/support/downloads/securityupdate_2004-04-05_(10_3_3).html\n",
"cves": [],
"links": [
{
"title": "Avis de s\u00e9curit\u00e9 Apple :",
"url": "http://docs.info.apple.com/article.html?artnum=61798"
}
],
"reference": "CERTA-2004-AVI-111",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2004-04-07T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": "Plusieurs vuln\u00e9rabilit\u00e9s affectent diff\u00e9rents composants de Mac OS X.\n",
"title": "Mise \u00e0 jour de s\u00e9curit\u00e9 MacOSX",
"vendor_advisories": [
{
"published_at": null,
"title": "Mise \u00e0 jour de s\u00e9curit\u00e9 Apple",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…