189 matches found
CVE-2015-7057: Improper Restriction of Operations within the Bounds of a Memory Buffer
otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service memory corruption via a crafted mach-o file, a different vulnerability than CVE-2015-7049...
CVE-2015-7049: Improper Restriction of Operations within the Bounds of a Memory Buffer
otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service memory corruption via a crafted mach-o file, a different vulnerability than CVE-2015-7057...
Apple Xcode Swift Information Disclosure Vulnerability
Xcode is the development tool used on Apple machines. Versions of Apple Xcode prior to 7.1 have mishandled type conversions in the Swift implementation, allowing attackers to obtain sensitive information...
Apple Xcode multiple security vulnerabilities
Restrictions bypass, weak encryption, information discosure, multiple svn vulnerabilities...
CVE-2015-7030
The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...
Type confusion
The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...
PT-2015-7465
Name of the Vulnerable Software and Affected Versions Apple Xcode versions prior to 7.1 Description The issue in Apple Xcode's Swift implementation mishandles type conversion, but the specific impact and attack vectors are not detailed. Recommendations For Apple Xcode versions prior to 7.1, updat...
CVE-2015-7030: Undefined Security Weakness
The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...
Apple Xcode < 7.1 (Mac OS X)
The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.1. It is, therefore, affected by a vulnerability in Swift-based programs due to unexpected values being returned for certain type conversions. An unauthenticated, remote attacker can exploit this, by manipulating retur...
Apple Xcode < 7.0 (Mac OS X) (POODLE)
The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.0. It is, therefore, affected by the multiple vulnerabilities : - A memory leak issue exists in file d1srtp.c related to the DTLS SRTP extension handling and specially crafted handshake messages. An attacker can exploi...
Apple Xcode Server Information Disclosure Vulnerability
Apple Xcode Server is a development server. An access checksum vulnerability in the Apple Xcode Server Processing Repository email list could lead to sending build notification messages to other users...
CVE-2015-5909
IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...
Code injection
IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...
Design/Logic Flaw
IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...
CVE-2015-5910
IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2015-5910: Exposure of Sensitive Information to an Unauthorized Actor
IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...
PT-2015-7069
Name of the Vulnerable Software and Affected Versions Xcode versions prior to 7.0 Description The issue concerns the IDE Xcode Server in Apple Xcode, where server traffic is not properly encrypted. This allows remote attackers to obtain sensitive information by sniffing the network. Recommendatio...
Apple Xcode Swift Integer Overflow Vulnerability
Apple Xcode is a set of integrated development environments provided to developers by Apple, Inc. that are primarily used to develop applications for Mac OS X and iOS.Swift is a programming language used to develop Mac OS X and iOS applications. An integer overflow vulnerability exists in the...
CVE-2015-3027
Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program...
UBUNTU-CVE-2015-3027
Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program...