2157 matches found
CVE-2015-3697
CVE-2015-3697 describes a buffer overflow in the Intel Graphics Driver for Apple OS X up to 10.10.3 (before 10.10.4) that allows a local user to gain privileges via unspecified vectors. The description does not specify affected products beyond Apple OS X versions, nor the exact vulnerable compone...
CVE-2015-3705
IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-3706...
CVE-2015-3714
Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which allows attackers to bypass intended launch restrictions via a modified app...
CVE-2015-3704
CVE-2015-3704 affects Apple OS X (before 10.10.4) in the Install Framework Legacy subsystem. The setuid root binary runner in Install.framework/Resources did not drop privileges properly, enabling a crafted app to execute arbitrary code with system privileges. Public references describe the vulne...
CVE-2015-3674
afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2015-3675
The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the modhfsapple module, which allows remote attackers to bypass HTTP authentication via a crafted URL...
CVE-2015-3700
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3701, and CVE-2015-3702...
CVE-2015-3705
CVE-2015-3705 affects IOAcceleratorFamily in OS X Yosemite (and OS X prior to 10.10.4). The vulnerability is memory corruption that could allow a crafted app to execute arbitrary code in a privileged context or cause a denial of service. Apple’s OS X 10.10.4/security update includes mitigations f...
CVE-2015-3699
Technical details for CVE-2015-3699 are not publicly available in the provided documents; monitor for updates.
Apple OS X Intel Graphics Card Driver Buffer Overflow Vulnerability (CNVD-2015-04272)
Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a buffer overflow issue with the Intel graphics driver, allowing attackers to exploit the vulnerability to crash applications or execute arbitrary code...
Apple OS X Intel Graphics Card Driver Buffer Overflow Vulnerability (CNVD-2015-04273)
Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a buffer overflow issue with the Intel graphics driver, allowing attackers to exploit the vulnerability to crash applications or execute arbitrary code...
Apple OS X GZIP DMG Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of DMG...
Apple OS X DFont FOND Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of data...
Apple OS X Entitlements Rootpipe Privilege Escalation
This module exploits the rootpipe vulnerability and bypasses Apple's initial fix for the issue by injecting code into a process with the 'admin.writeconfig' entitlement. Module Options msf use exploit/osx/local/rootpipe/entitlements msf undefinedentitlements show actions ...actions... msf...
Apple OS X NTFS Compression Block Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the handling of NTFS file systems. The issue li...
Apple OS X morx nSubtables Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of font...
(Pwn2Own) Apple OS X XSS Sandbox Bypass Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within certain URLs in the...
Apple OS X IOHIDSecurePromptClient Untrusted Pointer Dereference Arbitrary Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of calls to...
Unspecified Vulnerability in Apple OS X Server Firewall Component
Apple OS X Server is a set of Unix-based server operating software from the U.S. company Apple Apple. The software enables file sharing, meeting scheduling, web hosting, network remote access, etc. Firewall is one of the firewall components. A security vulnerability exists in the Firewall compone...
