语言:
http://support.apple.com/kb/HT5672
http://www.zerodayinitiative.com/advisories/ZDI-13-055/
http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html
严重性: High
ID: 65578
文件名: macosx_SecUpd2013-001.nasl
版本: 1.18
类型: local
代理: macosx
发布时间: 2013/3/15
最近更新时间: 2018/7/14
支持的传感器: Nessus Agent, Nessus
风险因素: High
分数: 7.4
风险因素: High
基本分数: 9.3
时间分数: 7.7
矢量: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CPE: cpe:/o:apple:mac_os_x
必需的 KB 项: Host/local_checks_enabled, Host/MacOSX/Version, Host/MacOSX/packages/boms
可利用: true
易利用性: Exploits are available
补丁发布日期: 2013/3/14
漏洞发布日期: 2012/3/28
Metasploit (Ruby on Rails JSON Processor YAML Deserialization Code Execution)
CVE: CVE-2011-3058, CVE-2012-2088, CVE-2012-3488, CVE-2012-3489, CVE-2012-3525, CVE-2012-3756, CVE-2013-0156, CVE-2013-0333, CVE-2013-0963, CVE-2013-0966, CVE-2013-0967, CVE-2013-0971, CVE-2013-0973
BID: 55072, 55074, 55167, 57575, 54270, 52762, 57598, 57187, 56552, 58509, 58513, 58514, 58516
APPLE-SA: APPLE-SA-2013-03-14-1