CVE-2012-0649 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	6.9 UNKNOWN	LOCAL	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C
apple	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 8%

Vendor	Product	Version
apple	mac_os_x	𝑥 ≤ 10.7.3
apple	mac_os_x	10.0
apple	mac_os_x	10.0.0
apple	mac_os_x	10.0.1
apple	mac_os_x	10.0.2
apple	mac_os_x	10.0.3
apple	mac_os_x	10.0.4
apple	mac_os_x	10.1
apple	mac_os_x	10.1.0
apple	mac_os_x	10.1.1
apple	mac_os_x	10.1.2
apple	mac_os_x	10.1.3
apple	mac_os_x	10.1.4
apple	mac_os_x	10.1.5
apple	mac_os_x	10.2
apple	mac_os_x	10.2.0
apple	mac_os_x	10.2.1
apple	mac_os_x	10.2.2
apple	mac_os_x	10.2.3
apple	mac_os_x	10.2.4
apple	mac_os_x	10.2.5
apple	mac_os_x	10.2.6
apple	mac_os_x	10.2.7
apple	mac_os_x	10.2.8
apple	mac_os_x	10.3
apple	mac_os_x	10.3.0
apple	mac_os_x	10.3.1
apple	mac_os_x	10.3.2
apple	mac_os_x	10.3.3
apple	mac_os_x	10.3.4
apple	mac_os_x	10.3.5
apple	mac_os_x	10.3.6
apple	mac_os_x	10.3.7
apple	mac_os_x	10.3.8
apple	mac_os_x	10.3.9
apple	mac_os_x	10.4
apple	mac_os_x	10.4.0
apple	mac_os_x	10.4.1
apple	mac_os_x	10.4.2
apple	mac_os_x	10.4.3
apple	mac_os_x	10.4.4
apple	mac_os_x	10.4.5
apple	mac_os_x	10.4.6
apple	mac_os_x	10.4.7
apple	mac_os_x	10.4.8
apple	mac_os_x	10.4.9
apple	mac_os_x	10.4.10
apple	mac_os_x	10.4.11
apple	mac_os_x	10.5
apple	mac_os_x	10.5.0
apple	mac_os_x	10.5.1
apple	mac_os_x	10.5.2
apple	mac_os_x	10.5.3
apple	mac_os_x	10.5.4
apple	mac_os_x	10.5.5
apple	mac_os_x	10.5.6
apple	mac_os_x	10.5.7
apple	mac_os_x	10.5.8
apple	mac_os_x	10.6.0
apple	mac_os_x	10.6.1
apple	mac_os_x	10.6.2
apple	mac_os_x	10.6.3
apple	mac_os_x	10.6.4
apple	mac_os_x	10.6.5
apple	mac_os_x	10.6.6
apple	mac_os_x	10.6.7
apple	mac_os_x	10.6.8
apple	mac_os_x	10.7.0
apple	mac_os_x	10.7.1
apple	mac_os_x	10.7.2
apple	mac_os_x_server	𝑥 ≤ 10.7.3
apple	mac_os_x_server	10.0
apple	mac_os_x_server	10.0.0
apple	mac_os_x_server	10.0.1
apple	mac_os_x_server	10.0.2
apple	mac_os_x_server	10.0.3
apple	mac_os_x_server	10.0.4
apple	mac_os_x_server	10.1
apple	mac_os_x_server	10.1.0
apple	mac_os_x_server	10.1.1
apple	mac_os_x_server	10.1.2
apple	mac_os_x_server	10.1.3
apple	mac_os_x_server	10.1.4
apple	mac_os_x_server	10.1.5
apple	mac_os_x_server	10.2
apple	mac_os_x_server	10.2.0
apple	mac_os_x_server	10.2.1
apple	mac_os_x_server	10.2.2
apple	mac_os_x_server	10.2.3
apple	mac_os_x_server	10.2.4
apple	mac_os_x_server	10.2.5
apple	mac_os_x_server	10.2.6
apple	mac_os_x_server	10.2.7
apple	mac_os_x_server	10.2.8
apple	mac_os_x_server	10.3
apple	mac_os_x_server	10.3.0
apple	mac_os_x_server	10.3.1
apple	mac_os_x_server	10.3.2
apple	mac_os_x_server	10.3.3
apple	mac_os_x_server	10.3.4
apple	mac_os_x_server	10.3.5
apple	mac_os_x_server	10.3.6
apple	mac_os_x_server	10.3.7
apple	mac_os_x_server	10.3.8
apple	mac_os_x_server	10.3.9
apple	mac_os_x_server	10.4
apple	mac_os_x_server	10.4.0
apple	mac_os_x_server	10.4.1
apple	mac_os_x_server	10.4.2
apple	mac_os_x_server	10.4.3
apple	mac_os_x_server	10.4.4
apple	mac_os_x_server	10.4.5
apple	mac_os_x_server	10.4.6
apple	mac_os_x_server	10.4.7
apple	mac_os_x_server	10.4.8
apple	mac_os_x_server	10.4.9
apple	mac_os_x_server	10.4.10
apple	mac_os_x_server	10.4.11
apple	mac_os_x_server	10.5
apple	mac_os_x_server	10.5.0
apple	mac_os_x_server	10.5.1
apple	mac_os_x_server	10.5.2
apple	mac_os_x_server	10.5.3
apple	mac_os_x_server	10.5.4
apple	mac_os_x_server	10.5.5
apple	mac_os_x_server	10.5.6
apple	mac_os_x_server	10.5.7
apple	mac_os_x_server	10.5.8
apple	mac_os_x_server	10.6.0
apple	mac_os_x_server	10.6.1
apple	mac_os_x_server	10.6.2
apple	mac_os_x_server	10.6.3
apple	mac_os_x_server	10.6.4
apple	mac_os_x_server	10.6.5
apple	mac_os_x_server	10.6.6
apple	mac_os_x_server	10.6.7
apple	mac_os_x_server	10.6.8
apple	mac_os_x_server	10.7.0
apple	mac_os_x_server	10.7.1
apple	mac_os_x_server	10.7.2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

http://support.apple.com/kb/HT5281

http://www.securityfocus.com/bid/53445

http://www.securityfocus.com/bid/53456

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

http://support.apple.com/kb/HT5281

http://www.securityfocus.com/bid/53445

http://www.securityfocus.com/bid/53456