Memory corruption

AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cause a denial of service memory corruption via unspecified Thunderbolt commands...

CVE-2015-3681

CVE-2015-3681 affects Apple Type Services (ATS) in OS X versions prior to 10.10.4. It allows remote code execution or memory corruption via a crafted font file. The issue is addressed in OS X Yosemite 10.10.4 / Security Update 2015-005, which lists ATS CVEs 2015-3679 through 2015-3682 as addresse...

CVE-2015-3672

Admin Framework in Apple OS X before 10.10.4 does not properly handle authentication errors, which allows local users to obtain admin privileges via unspecified vectors...

CVE-2015-3680

Apple Type Services ATS in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3681, and CVE-2015-3682...

CVE-2015-3683

The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-3700

Technical details for CVE-2015-3700 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-3711

CVE-2015-3711 affects Apple OS X NTFS memory-layout disclosure. The vulnerability arises from the NTFS implementation and can expose kernel memory layout via a crafted app. Affected OS X versions before 10.10.4 are implicated; remediation is to upgrade to OS X 10.10.4 (Security Update 2015‑005), ...

CVE-2015-3674

CVE-2015-3674 affects the AFP server (afpserver) in Apple OS X; prior to 10.10.4 it allows a remote attacker to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors. The issue is mitigated by upgrading to OS X 10.10.4 (Security Update 2015-005 for Yo...

CVE-2015-3708

kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a crafted app that conducts a symlink attack...

CVE-2015-3696

Technical details for CVE-2015-3696 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-3701

Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, and CVE-2015-3702...

CVE-2015-3706

IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-3705...

CVE-2015-3698

Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702...

CVE-2015-3673

Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility...

CVE-2015-3671

CVE-2015-3671 affects Mac OS X: Admin Framework in OS X versions prior to 10.10.4 fails to properly verify XPC entitlements, allowing a local user to bypass authentication and gain admin privileges. The issue is tied to entitlement checks and is addressed in the OS X 10.10.4/Security Update 2015-...

CVE-2015-3678

AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cause a denial of service memory corruption via unspecified Thunderbolt commands...

CVE-2015-3712

The NVIDIA graphics driver in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service out-of-bounds write via a crafted app...

CVE-2015-3675

The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the modhfsapple module, which allows remote attackers to bypass HTTP authentication via a crafted URL...

CVE-2015-3704

runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-3673

CVE-2015-3673 affects Apple OS X prior to 10.10.4. The issue stems from the Admin Framework not properly restricting the location of writeconfig clients, enabling local users to obtain root privileges by moving and then modifying Directory Utility. Public references include exploits and PoCs (e.g...