2149 matches found
ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability
ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-039 April 2, 2010 -- CVE ID: CVE-2010-0497 -- Affected Vendors: Apple -- Affected Products: Apple OS X -- TippingPointTM IPS Customer Protection: TippingPoint...
Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the handling of internet enabled disk image files...
Apple OS X iTunes 8.1.1 ITMS Overflow
$Id: itmsoverflow.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
apple 10.5.8 代码执行漏洞
No description provided by source...
Apple Mac OS X multiple security vulnerabilities
Privilege escalations, multiple DoS conditions, buffer overflow in AppleTalk client, Safari certificate spoofing, multiple vulnerabilities on images parsing...
Apple OS X iTunes 8.1.1 ITMS Overflow
This modules exploits a stack-based buffer overflow in iTunes itms:// URL parsing. It is accessible from the browser and in Safari, itms urls will be opened in iTunes automatically. Because iTunes is multithreaded, only vfork-based payloads should be used. This module requires Metasploit:...
ZDI-09-023: Apple OS X ATSServer Compact Font Format Parsing Memory Corruption Vulnerability
ZDI-09-023: Apple OS X Unspecified ATSServer Font Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-023 May 13, 2009 -- CVE ID: CVE-2009-0154 -- Affected Vendors: Apple -- Affected Products: Apple OS X -- Vulnerability Details: This vulnerability allows...
Apple OS X ATSServer Compact Font Format Parsing Memory Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw appears to exist in the ATSServer...
Skype does not properly filter input from external websites
Overview The Skype client does not properly filter user-supplied input from websites that provide video content to Skype users. Description Skype is a peer-to-peer application that provides Voice over IP VoIP and Instant Messaging services. The Skype client is available for the Microsoft Windows,...
CVE-2007-1279
Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop management tools, allows local users to gain privileges via unspecified vectors during installation of the update by a different user who has administrative privileges...
CVE-2007-1279
Unspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when patching with desktop management tools, allows local users to gain privileges via unspecified vectors during installation of the update by a different user who has administrative privileges...
CVE-2007-1279
CVE-2007-1279 affects the installer for Adobe Bridge 1.0.3 update on macOS. The vulnerability is described as a local privilege escalation during the installation process when patching with desktop management tools, enabling a local user to gain privileges via unspecified vectors during installat...
CVE-2006-4866
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument...
CVE-2006-4866
CVE-2006-4866: Buffer overflow in Apple OS X kextload (used by TDIXSupport in Roxio Toast Titanium) can allow a local user to execute arbitrary code via a long extension argument. Exploitation is local with low complexity and no authentication; CVSS notes partial impact to confidentiality, integr...
CVE-2006-3413
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information...
CVE-2006-3413
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information...
CVE-2006-3413
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information...
CVE-2006-3413
CVE-2006-3413 affects Privoxy when used with Tor prior to 0.1.1.20 on Apple macOS. The root cause is that the Privoxy configuration can log all data via the logfile, enabling exposure of potentially sensitive information. The Red Hat, Debian, Ubuntu, and OSV entries corroborate the same descripti...
CVE-2006-3413
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information...
CVE-2006-3356
The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service application crash via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469...