Trend Micro For Mac Yosemite

Trend Micro Maximum Security 2020 Version 16 3 Devices 3 Years for PC, Mac, Android and IOS Product Key card Windows7, 8.1 and 10 Trend Micro 3.9 out of 5 stars 45. Trend Micro™ Antivirus for Mac® Our essential protection for your peace of mind. Key features and benefits: Advanced machine learning technology enables a multi-layered defense for more effective and efficient protection against ever-evolving threats. Stop issues before they arise and predict unknown and future threats with high confidence. Apex Endpoint Security with the broadest range of capabilities, including high fidelity machine learning and advanced ransomware protection.

About Apple security updates

For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page.

For more information about security, see the Apple Product Security page. You can encrypt communications with Apple using the Apple Product Security PGP Key.

Apple security documents reference vulnerabilities by CVE-ID when possible.

macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite

Released May 15, 2017

802.1X

Available for: macOS Sierra 10.12.4

Impact: A malicious network with 802.1X authentication may be able to capture user network credentials

Description: A certificate validation issue existed in EAP-TLS when a certificate changed. This issue was addressed through improved certificate validation.

CVE-2017-6988: Tim Cappalli of Aruba, a Hewlett Packard Enterprise company

Accessibility Framework

Available for: macOS Sierra 10.12.4

Impact: An application may be able to gain system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-6978: Ian Beer of Google Project Zero

CoreAnimation

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: Processing maliciously crafted data may lead to arbitrary code execution

Description: A memory consumption issue was addressed through improved memory handling.

CVE-2017-2527: Ian Beer of Google Project Zero

Mysql client for macos. The terminal commands are new to me but I think once I can actually get started, working through the exercises should be OK.From researching the web the various blogs tell me to navigate to to the mysql folder in the terminal:/usr/local/mysqlFine. Then it gets a little less clear as nearly each article has a different set of instructions on how to proceed.

CoreAudio

Available for: macOS Sierra 10.12.4

Impact: An application may be able to read restricted memory

Description: A validation issue was addressed with improved input sanitization.

CVE-2017-2502: Yangkang (@dnpushme) of Qihoo360 Qex Team

CoreFoundation

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: Parsing maliciously crafted data may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2522: Ian Beer of Google Project Zero

Entry added May 19, 2017

CoreText

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: Processing a maliciously crafted file may lead to application termination

Description: A denial of service issue was addressed through improved validation.

CVE-2017-7003: Jake Davis of SPYSCAPE (@DoubleJake), João Henrique Neves and Stephen Goldberg of Salesforce

Entry updated June 7, 2017

DiskArbitration

Available for: macOS Sierra 10.12.4 and OS X El Capitan 10.11.6

Impact: An application may be able to gain system privileges

Description: A race condition was addressed with additional filesystem restrictions.

CVE-2017-2533: Samuel Groß and Niklas Baumstark working with Trend Micro's Zero Day Initiative

Foundation

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: Parsing maliciously crafted data may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2523: Ian Beer of Google Project Zero

Entry added May 19, 2017

HFS

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: An application may be able to read restricted memory

Description: A validation issue was addressed with improved input sanitization.

Trend Micro For Mac Yosemite 10

CVE-2017-6990: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative

iBooks

Available for: macOS Sierra 10.12.4

Impact: A maliciously crafted book may open arbitrary websites without user permission

Description: A URL handling issue was addressed through improved state management.

CVE-2017-2497: Jun Kokatsu (@shhnjk)

iBooks

Available for: macOS Sierra 10.12.4

Impact: An application may be able to execute arbitrary code with root privileges

Description: An issue existed within the path validation logic for symlinks. This issue was addressed through improved path sanitization.

CVE-2017-6981: evi1m0 of YSRC (sec.ly.com)

iBooks

Available for: macOS Sierra 10.12.4

Impact: An application may be able to escape its sandbox

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-6986: evi1m0 of YSRC (sec.ly.com) & Heige (SuperHei) of Knownsec 404 Security Team

Intel Graphics Driver

Available for: macOS Sierra 10.12.4

Impact: An application may be able to gain kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2503: sss and Axis of 360Nirvan team

IOGraphics

Available for: macOS Sierra 10.12.4

Impact: An application may be able to gain kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2545: 360 Security (@mj0011sec) working with Trend Micro's Zero Day Initiative

IOSurface

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: An application may be able to gain kernel privileges

Description: A race condition was addressed through improved locking.

CVE-2017-6979: Adam Donenfeld (@doadam) of the Zimperium zLabs Team

Entry updated May 17, 2017

Kernel

Available for: macOS Sierra 10.12.4

Impact: An application may be able to gain kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2494: Jann Horn of Google Project Zero

Kernel

Available for: macOS Sierra 10.12.4

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A race condition was addressed through improved locking.

CVE-2017-2501: Ian Beer of Google Project Zero

Kernel

Available for: macOS Sierra 10.12.4

Impact: An application may be able to read restricted memory

Description: A validation issue was addressed with improved input sanitization.

CVE-2017-2507: Ian Beer of Google Project Zero

CVE-2017-2509: Jann Horn of Google Project Zero

CVE-2017-6987: Patrick Wardle of Synack

Trend micro for mac yosemite download

Kernel

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: An application may be able to read restricted memory

Description: A validation issue was addressed with improved input sanitization.

CVE-2017-2516: Jann Horn of Google Project Zero

Kernel

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: An application may be able to gain kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2546: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative

Multi-Touch

Available for: macOS Sierra 10.12.4

Impact: An application may be able to gain kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2542: 360 Security (@mj0011sec) working with Trend Micro's Zero Day Initiative

CVE-2017-2543: 360 Security (@mj0011sec) working with Trend Micro's Zero Day Initiative

NVIDIA Graphics Drivers

Available for: macOS Sierra 10.12.4

Impact: An application may be able to gain kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-6985: Axis and sss of Nirvan Team of Qihoo 360 and Simon Huang (@HuangShaomang) of IceSword Lab of Qihoo 360

Sandbox

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: An application may be able to escape its sandbox

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2512: Federico Bento of Faculty of Sciences, University of Porto

Security

Trend Micro For Mac Download

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: An application may be able to escape its sandbox

Description: A resource exhaustion issue was addressed through improved input validation.

CVE-2017-2535: Samuel Groß and Niklas Baumstark working with Trend Micro's Zero Day Initiative

Security

Available for: macOS Sierra 10.12.4

Impact: A local application may be able to send privileged XPC messages without entitlements

Description: A race condition was addressed with improved consistency checks.

CVE-2017-7004: Ian Beer of Google Project Zero

Entry added June 8, 2017

Speech Framework

Available for: macOS Sierra 10.12.4

Free Trend Micro For Mac

Impact: An application may be able to escape its sandbox

Description: An access issue was addressed through additional sandbox restrictions.

CVE-2017-2534: Samuel Groß and Niklas Baumstark working with Trend Micro's Zero Day Initiative

Speech Framework

Available for: macOS Sierra 10.12.4

Impact: An application may be able to escape its sandbox

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-6977: Samuel Groß and Niklas Baumstark working with Trend Micro's Zero Day Initiative

SQLite

Available for: macOS Sierra 10.12.4

Impact: A maliciously crafted SQL query may lead to arbitrary code execution

Description: A use after free issue was addressed through improved memory management.

CVE-2017-2513: found by OSS-Fuzz

The 1.7.2 version of DVD Database X for Mac is available as a free download on our website. The program belongs to Lifestyle Tools. The common filename for the application's installer is dvddatabasex.zip. This free Mac app was originally produced by Joe Kusterbeck. The most popular version among the application users is 1.7. Create your own DVD database. Download genre, cast, crew, DVD details and cover images automatically. Free trial edition. For Windows, macOS, iOS, Android and web. Jun 12, 2007  DVD Database X has the following features: Easy-to-use, Intuitive Interface, Online Lookup from the Internet Movie Database Website (IMDB.com) and Amazon, DVD Label and Jacket Printing, Automatic Playing of unecrypted VIDEOTS Folders from your Hard Drive, and import and export from AppleWorks compatible text files. Dvd database for macos. For macOS Catalina. Watch DVD movies on your Mac. Play DVDs using your built-in DVD drive or an external DVD drive, such as a SuperDrive. How to watch a DVD movie. Preview your own movies. You can use DVD Player to watch movies you created with another app, like Final Cut Pro. From Mike McGee: The CD/DVD Library is the ultimate database to manage your Compact Disc or DVD collection. With the CD/DVD Library, you can search through your CD/DVD collection for various.

SQLite

Available for: macOS Sierra 10.12.4

Impact: A maliciously crafted SQL query may lead to arbitrary code execution

Description: A buffer overflow issue was addressed through improved memory handling.

CVE-2017-2518: found by OSS-Fuzz

Trend Micro For Mac Computers

CVE-2017-2520: found by OSS-Fuzz

SQLite

Available for: macOS Sierra 10.12.4

Impact: A maliciously crafted SQL query may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2519: found by OSS-Fuzz

SQLite

Available for: macOS Sierra 10.12.4

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: Multiple memory corruption issues were addressed with improved input validation.

CVE-2017-6983: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative

CVE-2017-6991: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative

CVE-2017-7000: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative

CVE-2017-7001: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative

CVE-2017-7002: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative

Entry updated May 24, 2017

TextInput

Trend Micro For Mac Review

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: Parsing maliciously crafted data may lead to arbitrary code execution

Trend Micro For Mac Yosemite 2017

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2524: Ian Beer of Google Project Zero

WindowServer

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: An application may be able to gain system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2017-2537: Chaitin Security Research Lab (@ChaitinTech) working with Trend Micro's Zero Day Initiative

CVE-2017-2541: Richard Zhu (fluorescence) working with Trend Micro's Zero Day Initiative

CVE-2017-2548: Team Sniper (Keen Lab and PC Mgr) working with Trend Micro's Zero Day Initiative

Trend Micro For Mac Yosemite Download

WindowServer

Available for: macOS Sierra 10.12.4, OS X El Capitan 10.11.6, and OS X Yosemite 10.10.5

Impact: An application may be able to read restricted memory

Trend Micro Antivirus For Mac Yosemite

Description: A validation issue was addressed with improved input sanitization.

CVE-2017-2540: Richard Zhu (fluorescence) working with Trend Micro's Zero Day Initiative

Additional recognition

Kernel

We would like to acknowledge Jann Horn of Google Project Zero for their assistance.

CFNetwork

We would like to acknowledge Samuel Groß and Niklas Baumstark working with Trend Micro's Zero Day Initiative for their assistance.

macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite includes the security content of Safari 10.1.1.