362 matches found
Design/Logic Flaw
fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1134, and CVE-2015-1135...
CVE-2015-1135
CVE-2015-1135 affects Apple OS X before 10.10.3, where fontd in Apple Type Services (ATS) can allow local privilege escalation via unspecified vectors. The advisory attributes the flaw to ATS handling, with a combined impact of confidentiality, integrity, and availability being affected for local...
CVE-2015-1132
Technical details for CVE-2015-1132 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.
CVE-2015-1131
Technical details for CVE-2015-1131 are not publicly available in the provided connected documents; the materials reference related CVEs but do not specify affected components, root cause, impact, or fixes. Monitor for updates.
CVE-2015-1134
Technical details for CVE-2015-1134 are not publicly available in the provided documents; monitor for updates.
CVE-2015-1133
fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1134, and CVE-2015-1135...
CVE-2015-1132
fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1133, CVE-2015-1134, and CVE-2015-1135...
CVE-2015-1133
CVE-2015-1133 concerns the fontd component of Apple Type Services (ATS) on macOS, where local privilege escalation is possible on affected builds prior to macOS 10.10.3. The description indicates an unspecified attack vector and notes this as a separate issue from other CVEs in the same family (1...
Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)
The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-004. It is, therefore, affected multiple vulnerabilities in the following components : - Apache - ATS - Certificate Trust Policy - CoreAnimation - FontParser - Graphics Driver - ImageIO -...
Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)
The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - Apache - ATS - Certificate Trust Policy - CFNetwork HTTPProtocol - CFNetwork Session - CFURL - CoreAnimation -...
APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004 OS X Yosemite 10.10.3 and Security Update 2015-004 are now available and address the following: Admin Framework Available for: OS X Yosemite v10.10 to v10.10.2 Impact: A process may gain...
Humhub Insecure Password Validation / Reset
Humhub insecure password validation and reset design + Discovered by: Jos Wetzels + Affects: Humhub password == $this-hashPassword$password Here a hash of the user-supplied password gets compared to the stored hash in an insecure manner, since PHP's loose type comparison operators compare only...
Apple Mac OS X Multiple Vulnerabilities -06 (Sep 2014)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
APPLE-SA-2014-02-25-1 OS X Mavericks 10.9.2 and Security Update 2014-001
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-02-25-1 OS X Mavericks 10.9.2 and Security Update 2014-001 OS X Mavericks 10.9.2 and Security Update 2014-001 is now available and addresses the following: Apache Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain...
CVE-2014-1262
Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption...
CVE-2014-1255
Apple Type Services ATS in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...
CVE-2014-1254
Apple Type Services ATS in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Type 1 font that is embedded in a document...
Design/Logic Flaw
Apple Type Services ATS in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...
Memory corruption
Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption...