PT-2015-5126

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.3 Description A buffer overflow issue exists in the UniformTypeIdentifiers component, allowing local users to gain privileges via a crafted Uniform Type Identifier. Recommendations For Apple OS X versions pri...

PT-2015-5101

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue is related to the setreuid and setregid system-call implementations in the kernel, which do not properly perform privileg...

PT-2015-5130

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.3 Description The issue allows context-dependent attackers to obtain sensitive information by reading a log file where the password of a user is stored. This is related to Screen Sharing in Apple OS X...

PT-2015-5080

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue allows attackers to obtain sensitive information about kernel memory via a crafted app. This is related to IOHIDFamily...

PT-2015-5087

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue allows remote attackers to cause a denial of service or obtain sensitive packet-content information via a crafted ICMP...

PT-2015-5120

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.3 Description The issue allows local users to cause a denial of service via unspecified vectors. Recommendations For versions prior to 10.10.3, update to version 10.10.3 or later to resolve the issue...

PT-2015-5115

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1134, and CVE-2015-1135...

CVE-2015-1117: Undefined Security Weakness

The 1 setreuid and 2 setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not properly perform privilege drops, which makes it easier for attackers to execute code with unintended user or group privileges via a crafted a...

CVE-2015-1088: Improper Input Validation

CFURL in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly validate URLs, which allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2015-1118: Undefined Security Weakness

libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service memory corruption and application crash via a crafted configuration profile...

CVE-2015-1093: Undefined Security Weakness

FontParser in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2015-1096: Exposure of Sensitive Information to an Unauthorized Actor

IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app...

CVE-2015-1148: Exposure of Sensitive Information to an Unauthorized Actor

Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file...

CVE-2015-1134: Improper Input Validation

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135...

CVE-2015-1132: Improper Input Validation

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1133, CVE-2015-1134, and CVE-2015-1135...

CVE-2015-1130: Improper Link Resolution Before File Access

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors...

CVE-2015-1136: Undefined Security Weakness

Use-after-free vulnerability in CoreAnimation in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code by leveraging improper use of a mutex...

CVE-2015-1147: Exposure of Sensitive Information to an Unauthorized Actor

Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-1145: Undefined Security Weakness

The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1146...

CVE-2015-1144: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the UniformTypeIdentifiers component in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted Uniform Type Identifier...