[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-91385-5

Platform: cpe:/o:apple:mac_os_x:10.11Date: (C)2018-02-22   (M)2023-07-04



Disable Automatic Actions for Video DVDs Applications should not be configured to launch automatically when a disk is inserted. This potentially circumvents anti virus software and allows malicious users to craft disks that can exploit user applications. Disabling Automatic Actions for video DVDs mitigates this risk.


Parameter:

[yes/no]


Technical Mechanism:

To check if the system has the correct setting for picture CDs open up System Preferences, CDs & DVDs. The setting for 'When you insert a video DVD' should be set to 'Ignore', if it is not, this is a finding.

CCSS Severity:CCSS Metrics:
CCSS Score : 8.4Attack Vector: LOCAL
Exploit Score: 2.5Attack Complexity: LOW
Impact Score: 5.9Privileges Required: NONE
Severity: HIGHUser Interaction: NONE
Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HScope: UNCHANGED
 Confidentiality: HIGH
 Integrity: HIGH
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:44013


OVAL    1
oval:org.secpod.oval:def:44013
XCCDF    1
xccdf_org.secpod_benchmark_general_Mac_OS_X_10_11

© SecPod Technologies