Sign-up

ID

VAR-201110-0301


CVE

CVE-2011-3437


TITLE

Apple Mac OS X of Apple Type Services (ATS) Integer sign error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2011-002487

DESCRIPTION

Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document. The update addresses new vulnerabilities that affect Application Firewall, ATS, CFNetwork, CoreMedia, CoreProcesses, CoreStorage, File Systems, IOGraphics, Kernel, MediaKit, Open Directory, QuickTime, SMB File Server, User Documentation, and libsecurity. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. OS X versions 10.7.x prior to 10.7.2 are affected. NOTE: This issue was previously discussed in BID 50085 (Apple Mac OS X Prior to 10.7.2 Multiple Security Vulnerabilities) but has been given its own record to better document it. Apple has released updates to address these vulnerabilities. I. Apple has released updates to address these vulnerabilities. II. Impact A remote, unauthenticated attacker could execute arbitrary code, cause a denial of service, or gain unauthorized access to your files or system. III. This advisory describes any known issues related to the updates and the specific impacts for each vulnerability. Administrators are encouraged to note these issues and impacts and test for any potentially adverse effects before wide-scale deployment. IV. Please send email to <cert@cert.org> with "TA11-286A Feedback VU#421739" in the subject. ____________________________________________________________________ For instructions on subscribing to or unsubscribing from this mailing list, visit <http://www.us-cert.gov/cas/signup.html>. ____________________________________________________________________ Produced 2011 by US-CERT, a government organization. Terms of use: <http://www.us-cert.gov/legal.html> ____________________________________________________________________ Revision History October 13, 2011: Initial release -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) iQEVAwUBTpb8zj/GkGVXE7GMAQI21Af/SHWzIangqPW9vtuG/MQWSBMy9nG4wIZS DUEAWBEMPTKF3fLrIy6TVpRLN3q/q4dCYXzM4lec4IzKvEbV/bUyg15xEfYdxB0v s/vARGNwf7tjSbjo+PaHLuSZ1HLn/GLO3CXaf+ut/Kb8y9Fsir5klMgrCX/N0JkY dLoV9R6zGs1aQzmF9ULB1IQ2/lUkg6CGnyARh0prfhRFwKfu7NZXb8yz5ex68q6V NF6j9l+XK0Cl4K7R+0ESD4e47jLCg6iN175O8VzrlxiRvBRAyTaFycdMB4uSkmii xu8SqU2QFhsIJy8J+i1Bb6kuWkaxAnUbxO4tRrmXoqTXl9m0CtpnWA== =3Wp2 -----END PGP SIGNATURE-----

Trust: 2.34

sources: NVD: CVE-2011-3437 // JVNDB: JVNDB-2011-002487 // BID: 50085 // BID: 50112 // VULHUB: VHN-51382 // PACKETSTORM: 105790

AFFECTED PRODUCTS

vendor:applemodel:mac os x serverscope:eqversion:10.7.1

Trust: 1.6

vendor:applemodel:mac os x serverscope:eqversion:10.7.0

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.7.1

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.7.0

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:v10.7 and v10.7.1

Trust: 0.8

vendor:applemodel:mac os x serverscope:eqversion:v10.7 and v10.7.1

Trust: 0.8

vendor:applemodel:mac os serverscope:eqversion:x10.7.1

Trust: 0.6

vendor:applemodel:mac os serverscope:eqversion:x10.7

Trust: 0.6

vendor:applemodel:mac osscope:neversion:x10.7.2

Trust: 0.6

vendor:applemodel:mac os serverscope:neversion:x10.7.2

Trust: 0.6

vendor:applemodel:mac osscope:eqversion:x10.7.1

Trust: 0.6

vendor:applemodel:mac osscope:eqversion:x10.6

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.1

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.6

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.1

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.8

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.2

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.2

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.7

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.5

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.6.3

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.5

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.4

Trust: 0.3

vendor:applemodel:mac os serverscope:eqversion:x10.6.3

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.7

Trust: 0.3

sources: BID: 50085 // BID: 50112 // JVNDB: JVNDB-2011-002487 // CNNVD: CNNVD-201110-346 // NVD: CVE-2011-3437

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-3437
value: MEDIUM

Trust: 1.0

NVD: CVE-2011-3437
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201110-346
value: MEDIUM

Trust: 0.6

VULHUB: VHN-51382
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2011-3437
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-51382
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-51382 // JVNDB: JVNDB-2011-002487 // CNNVD: CNNVD-201110-346 // NVD: CVE-2011-3437

PROBLEMTYPE DATA

problemtype:CWE-189

Trust: 1.9

sources: VULHUB: VHN-51382 // JVNDB: JVNDB-2011-002487 // NVD: CVE-2011-3437

THREAT TYPE

network

Trust: 0.6

sources: BID: 50085 // BID: 50112

TYPE

digital error

Trust: 0.6

sources: CNNVD: CNNVD-201110-346

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-002487

PATCH
title:HT5002url:http://support.apple.com/kb/HT5002
Trust: 0.8
title:MacOSXUpd10.7.2url:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=40893
Trust: 0.6
title:MacOSXServerUpd10.7.2url:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=40892
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2011-002487 // 
            
            
            
            CNNVD: CNNVD-201110-346

EXTERNAL IDS
db:NVDid:CVE-2011-3437
Trust: 3.1
db:BIDid:50085
Trust: 1.4
db:OSVDBid:76356
Trust: 1.1
db:USCERTid:TA11-286A
Trust: 0.9
db:JVNDBid:JVNDB-2011-002487
Trust: 0.8
db:CNNVDid:CNNVD-201110-346
Trust: 0.7
db:SECUNIAid:46417
Trust: 0.6
db:APPLEid:APPLE-SA-2011-10-12-3
Trust: 0.6
db:BIDid:50112
Trust: 0.4
db:VULHUBid:VHN-51382
Trust: 0.1
db:PACKETSTORMid:105790
Trust: 0.1
sources:
            
            
            VULHUB: VHN-51382 // 
            
            
            
            BID: 50085 // 
            
            
            
            BID: 50112 // 
            
            
            
            JVNDB: JVNDB-2011-002487 // 
            
            
            
            PACKETSTORM: 105790 // 
            
            
            
            CNNVD: CNNVD-201110-346 // 
            
            
            
            NVD: CVE-2011-3437

REFERENCES
url:http://lists.apple.com/archives/security-announce/2011//oct/msg00003.html
Trust: 1.7
url:http://support.apple.com/kb/ht5002
Trust: 1.7
url:http://www.securityfocus.com/bid/50085
Trust: 1.1
url:http://osvdb.org/76356
Trust: 1.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/70571
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-3437
Trust: 0.8
url:http://jvn.jp/cert/jvnvu971123
Trust: 0.8
url:https://jvn.jp/cert/jvnta11-286a/
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-3437
Trust: 0.8
url:http://www.us-cert.gov/cas/techalerts/ta11-286a.html
Trust: 0.8
url:http://www.apple.com/macosx/
Trust: 0.6
url:http://secunia.com/advisories/46417
Trust: 0.6
url:http://www.us-cert.gov/cas/techalerts/ta11-286a.html>
Trust: 0.1
url:http://support.apple.com/kb/ht1338>
Trust: 0.1
url:http://support.apple.com/kb/ht5002>
Trust: 0.1
url:http://www.us-cert.gov/cas/signup.html>.
Trust: 0.1
url:http://www.us-cert.gov/legal.html>
Trust: 0.1
sources:
            
            
            VULHUB: VHN-51382 // 
            
            
            
            BID: 50085 // 
            
            
            
            BID: 50112 // 
            
            
            
            JVNDB: JVNDB-2011-002487 // 
            
            
            
            PACKETSTORM: 105790 // 
            
            
            
            CNNVD: CNNVD-201110-346 // 
            
            
            
            NVD: CVE-2011-3437

CREDITS
Anonymous, Apple, Will Dormann of the CERT/CC, Steven Michaud of Mozilla, Martin Tessarek, Steve Riggins of Geeks R Us, Justin C. Walker, Stephen Creswell, Erling Ellingsen of Facebook, Clint Tseng of the University of Washington, Michael
Kobb, Adam Kemp,
Trust: 0.3
sources:
            
            
            BID: 50085

SOURCES
db:VULHUBid:VHN-51382
db:BIDid:50085
db:BIDid:50112
db:JVNDBid:JVNDB-2011-002487
db:PACKETSTORMid:105790
db:CNNVDid:CNNVD-201110-346
db:NVDid:CVE-2011-3437

LAST UPDATE DATE
2024-11-23T21:02:49.134000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-51382date:2017-08-29T00:00:00
db:BIDid:50085date:2011-10-12T00:00:00
db:BIDid:50112date:2011-10-12T00:00:00
db:JVNDBid:JVNDB-2011-002487date:2011-10-25T00:00:00
db:CNNVDid:CNNVD-201110-346date:2011-10-17T00:00:00
db:NVDid:CVE-2011-3437date:2024-11-21T01:30:30.437

SOURCES RELEASE DATE
db:VULHUBid:VHN-51382date:2011-10-14T00:00:00
db:BIDid:50085date:2011-10-12T00:00:00
db:BIDid:50112date:2011-10-12T00:00:00
db:JVNDBid:JVNDB-2011-002487date:2011-10-25T00:00:00
db:PACKETSTORMid:105790date:2011-10-14T05:50:20
db:CNNVDid:CNNVD-201110-346date:2011-10-17T00:00:00
db:NVDid:CVE-2011-3437date:2011-10-14T10:55:11.247