Apple Mac OS X CVE-2011-3457 Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	51808
Class:	Input Validation Error
CVE:	CVE-2011-3457
Remote:	Yes
Local:	Yes
Published:	Feb 01 2012 12:00AM
Updated:	Feb 01 2012 12:00AM
Credit:	Chris Evans of the Google Chrome Security Team, and Marc Schoenefeld of the Red Hat Security Response Team
Vulnerable:	Apple Mac Os X Server 10.7.2 Apple Mac Os X Server 10.7.1 Apple Mac Os X Server 10.7 Apple Mac Os X Server 10.6.8 Apple Mac Os X 10.7.2 Apple Mac Os X 10.7.1
Not Vulnerable:	Apple Mac Os X Server 10.7.3 Apple Mac Os X 10.7.3

Apple Mac OS X CVE-2011-3457 Multiple Memory Corruption Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.


Apple Mac Os X Server 10.7.2

• Apple MacOSXServerUpd10.7.3.dmg
  For OS X Lion Server v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac Os X Server 10.6.8

• Apple SecUpdSrvr2012-001.dmg
  For Mac OS X Server v10.6.8
  http://www.apple.com/support/downloads/

Apple Mac Os X 10.7.1

• Apple MacOSXUpdCombo10.7.3.dmg
  For OS X Lion v10.7 and v10.7.1
  http://www.apple.com/support/downloads/

Apple Mac Os X 10.7.2

• Apple MacOSXUpd10.7.3.dmg
  For OS X Lion v10.7.2
  http://www.apple.com/support/downloads/

Apple Mac Os X Server 10.7

• Apple MacOSXServerUpdCombo10.7.3.dmg
  For OS X Lion Server v10.7 and v10.7.1
  http://www.apple.com/support/downloads/

Apple Mac Os X Server 10.7.1

• Apple MacOSXServerUpdCombo10.7.3.dmg
  For OS X Lion Server v10.7 and v10.7.1
  http://www.apple.com/support/downloads/

Apple Mac OS X CVE-2011-3457 Multiple Memory Corruption Vulnerabilities

References:

• Mac OS X Homepage (Apple)