4599 matches found
July 2014 Apple security patches
Apple has issued a slew of security updates addressing a wide swath of vulnerabilities in its Safari Web browser, Mavericks desktop operating system, iOS mobile platform and content streaming AppleTV product. Apple doesnāt rate the severity of the vulnerabilities it fixes nor does it advise on...
CVE-2014-1372
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call...
CVE-2014-1375
Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...
CVE-2014-1378
IOGraphicsFamily in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...
Memory corruption
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call...
Null pointer dereference
IOGraphicsFamily in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...
Design/Logic Flaw
Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...
CVE-2014-1378
CVE-2014-1378 refers to a vulnerability in the IOGraphicsFamily component of macOS OS X prior to 10.9.4. The issue allows a local attacker to bypass Address Space Layout Randomization (ASLR) by reading a kernel pointer stored in an IOKit object, enabling potential escalation of privileges. Affect...
CVE-2014-1378
IOGraphicsFamily in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...
CVE-2014-1375
Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...
CVE-2014-1372
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call...
CVE-2014-1375
CVE-2014-1375 affects the Intel Graphics Driver on Apple OS X
CVE-2014-1372
CVE-2014-1372 affects the Apple Graphics Driver in OS X prior to 10.9.4, where an out-of-bounds/read restriction flaw during a system-call processing path can allow a local user to read kernel memory and bypass ASLR. The connected Project Zero material describes exploitation via IOKit/virtual fun...
DVD X Player 5.5 Pro (SEH DEP + ASLR Bypass) Exploit
No description provided by source. ?php / Title: DVD X Player 5.5 Pro DEP + ASLR Bypass Exploit Date: Sep 08, 2011 Author: Rew [email protected] Discovered by: Blake http://www.exploit-db.com/exploits/17788/ Link: http://www.dvd-x-player.com/download/DVDXPlayerSetup.exe Tested on: WinXP Pro SP3 +...
MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...
Linux x86 ASLR deactivation - 83 bytes
No description provided by source. / Title: Linux x86 ASLR deactivation - 83 bytes Author: Jean Pascal Pereira [email protected] Web: http://0xffe4.org Disassembly of section .text: 08048060 start: 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 70 61 63 65 push $0x65636170 8048068...
TORQUE Resource Manager 2.5.x-2.5.13 - Stack Based Buffer Overflow Stub
No description provided by source. !/usr/bin/env python Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow stub Date: 27 May 2014 Exploit Author: bwall - @botnethunter Vulnerability discovered by: MWR Labs CVE: CVE-2014-0749 Vendor Homepage:...
DVD X Player 5.5.0 Pro / Standard - Universal Exploit, DEP+ASLR Bypass.
No description provided by source. // Author: sickness // Take a look at mona.py : awesome tool developed by corelanc0d3r and his team: https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/ // ----------------------------------------------------------- // Exploit Title: DVD X Player 5.5...
Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow
No description provided by source. $Id: bcaaabof.rb 13137 2011-07-09 04:10:52Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability
No description provided by source. //source: http://www.securityfocus.com/bid/44301/info / known for over a year, fixed in grsec bug is due to a bad limit on the max size of the stack for 32bit apps on a 64bit OS. Instead of them being limited to 1/4th of a 32bit address space, they're limited to...