=====================================================================

                           CERT-Renater

               Note d'Information No. 2015/VULN009
_____________________________________________________________________

DATE                : 10/03/2015

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Mac OS X.

======================================================================
https://support.apple.com/en-us/HT204413
______________________________________________________________________


    Security Update 2015-002

    iCloud Keychain

    Available for: OS X Yosemite v10.10.2

    Impact: An attacker with a privileged network position may be able
    to execute arbitrary code

    Description: Multiple buffer overflows existed in the handling of
    data during iCloud Keychain recovery. These issues were addressed
    through improved bounds checking.

    CVE-ID

    CVE-2015-1065 : Andrey Belenko of NowSecure


    IOAcceleratorFamily

    Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,
    and OS X Yosemite v10.10.2

    Impact: A malicious application may be able to execute arbitrary
    code with system privileges

    Description: An off by one issue existed in IOAcceleratorFamily.
    This issue was addressed through improved bounds checking.

    CVE-ID

    CVE-2015-1066 : Ian Beer of Google Project Zero


    IOSurface

    Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,
    and OS X Yosemite v10.10.2

    Impact: A malicious application may be able to execute arbitrary
    code with system privileges

    Description: A type confusion issue existed in IOSurface's handling
    of serialized objects. The issue was addressed through additional
    type checking.

    CVE-ID

    CVE-2015-1061 : Ian Beer of Google Project Zero


    Kernel

    Available for: OS X Yosemite v10.10.2

    Impact: Maliciously crafted or compromised applications may be able
    to determine addresses in the kernel

    Description: The mach_port_kobject kernel interface leaked kernel
    addresses and heap permutation value, which may aid in bypassing
    address space layout randomization protection. This was addressed
    by disabling the mach_port_kobject interface in production
    configurations.

    CVE-ID

    CVE-2014-4496 : TaiG Jailbreak Team


    Secure Transport

    Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5,
    and OS X Yosemite v10.10.2

    Impact: An attacker with a privileged network position may
    intercept SSL/TLS connections

    Description: Secure Transport accepted short ephemeral RSA keys,
    usually used only in export-strength RSA cipher suites, on
    connections using full-strength RSA cipher suites. This issue, also
    known as FREAK, only affected connections to servers which support
    export-strength RSA cipher suites, and was addressed by removing
    support for ephemeral RSA keys.

    CVE-ID

    CVE-2015-1067 : Benjamin Beurdouche, Karthikeyan Bhargavan, Antoine
    Delignat-Lavaud, Alfredo Pironti, and Jean Karim Zinzindohoue of
    Prosecco at Inria Paris

Information about products not manufactured by Apple, or independent
websites not controlled or tested by Apple, is provided without
recommendation or endorsement. Apple assumes no responsibility with
regard to the selection, performance, or use of third-party websites or
products. Apple makes no representations regarding third-party website
accuracy or reliability. Risks are inherent in the use of the Internet.
Contact the vendor for additional information.
Last Modified: Mar 9, 2015

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================