94 matches found
WebKit JSC JSArray::appendMemcpy Uninitialized Memory Copy Vulnerability
WebKit suffers from a JSC JSArray::appendMemcpy uninitialized memory copy vulnerability. WebKit: JSC: JSArray::appendMemcpy uninitialized memory copy CVE-2017-7064 WebKit: JSC: JSArray::appendMemcpy uninitialized memory copy Here's a snippet of JSArray::appendMemcpy. bool...
WebKit JSC JSArray::appendMemcpy Uninitialized Memory Copy
WebKit: JSC: JSArray::appendMemcpy uninitialized memory copy CVE-2017-7064 WebKit: JSC: JSArray::appendMemcpy uninitialized memory copy Here's a snippet of JSArray::appendMemcpy. bool JSArray::appendMemcpyExecState exec, VM& vm, unsigned startIndex, JSC::JSArray otherArray auto scope =...
CVE-2017-7064
creationtimestamp| type| source ---|---|--- 2017-07-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42375...
Apple iTunes < 12.6.2 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.6.2. It is, therefore, affected by multiple vulnerabilities : - Multiple out-of-bounds read errors exist in the libxml2 component due to improper handling of specially crafted XML documents. An unauthenticated, remote...
macOS : Apple Safari < 10.1.2 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 10.1.2. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the WebKit component due to improper handling of SVG filters. An unauthenticated, remote...
CVE-2017-7064
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...
CVE-2017-7064
CVE-2017-7064 affects WebKit-based components across Apple and WebKitGTK+ ecosystems. The issue is a memory access/read restriction bypass in the WebKit component, exploitable via crafted web content. Affected products include iOS 10.3.x, Safari 10.x, and WebKitGTK+ shipped with GTK+ deployments ...
About the security content of iCloud for Windows 6.2.2
About the security content of iCloud for Windows 6.2.2 This document describes the security content of iCloud for Windows 6.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
Memory corruption
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2015-7064...
CVE-2015-7064
CVE-2015-7064 affects OpenGL on Apple platforms: iOS < 9.2, OS X < 10.11.2, tvOS < 9.1, and watchOS
CVE-2015-7064
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2015-7066...
CVE-2014-7064
The CVE-2014-7064 entry concerns the Android app ben10 omniverse walkthrough (com.wben10omniverse2walkthrough) version 0.7, where TLS/SSL certificate validation is not performed. This missing certificate verification enables man-in-the-middle attackers to spoof SSL servers and obtain sensitive in...
CVE-2013-7064
CVE-2013-7064 describes a Cross-Site Scripting (XSS) vulnerability in the Drupal contributed module EU Cookie Compliance 7.x-1.x (prior to 7.x-1.12). The issue allows remote authenticated administrators (with the Administer EU Cookie Compliance popup permission) to inject arbitrary web script or ...
CVE-2008-7064
CVE-2008-7064 affects Quicksilver Forums 1.4.2 and earlier and QSF Portal before 1.4.5. The vulnerability is a directory traversal via the lang parameter in index.php that accepts a backslash () in Windows, bypassing a protection that only checks for forward slashes and can lead to including/exec...