libxls xls_addCell Formula Code Execution Vulnerability

Summary An exploitable out-of-bounds vulnerability exists in the xlsaddCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability. Tested...

CVE-2017-2391

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password...

CVE-2015-7033: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted document...

PT-2015-7466

Name of the Vulnerable Software and Affected Versions Apple iWork versions prior to 2.6 for iOS Apple Keynote versions prior to 6.6 Apple Pages versions prior to 5.6 Apple Numbers versions prior to 3.6 Description The issue allows remote attackers to obtain sensitive information via a crafted...

CVE-2015-7032: Exposure of Sensitive Information to an Unauthorized Actor

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document...