276 matches found
Apple 10.4.x Software Update Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22222/info Apple Software Update is prone to a format-string vulnerability. This issue presents itself because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a...
Apple Mac OS X 10.2.2 Directory Kernel Panic Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/6331/info Mac OS X is the BSD-derived operating system distributed and maintained by Apple Sofware. It has been reported that a denial of service exists in OS X. When a user creates a directory, descends it, creates anoth...
Apple Deployed Software Version Detection
Binary data 8060.prm...
Apple Software Detection (deprecated)
Binary data 7084.pasl...
UBUNTU-CVE-2013-0958
WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1...
UBUNTU-CVE-2012-3676
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...
Apple iTunes 10.x软件更新伪造漏洞
CVE ID：CVE-2008-3434 Apple iTunes是一款用于Mac和PC的一款免费应用程序。它可以播放你的全部音乐和视频内容。 Apple iTunes存在一个安全漏洞，允许恶意用户进行伪造攻击。 使用HTTP请求检查新的更新时软件升级机制存在缺陷，攻击者可以利用漏洞通过中间人攻击伪造更新。 要成功利用漏洞需要目标系统没有安装Apple Software Update。 Apple iTunes 10.x 厂商解决方案 Apple iTunes 10.5.1已经修复此漏洞，建议用户下载使用： http://www.apple.com...
Apple Software Update 2.1.1.116 (ScriptingObjectModel.dll) Remote BOF
Exploit for macOS platform in category remote exploits ===================================================================== Apple Software Update 2.1.1.116 ScriptingObjectModel.dll Remote BOF =====================================================================...
Apple Software Update 2.1.1.116 (SoftwareUpdateAdmin.dll) Remote BOF
Exploit for macOS platform in category remote exploits ==================================================================== Apple Software Update 2.1.1.116 SoftwareUpdateAdmin.dll Remote BOF ====================================================================...
Apple iTunes 8.0.2.20/QuickTime 7.5.5 - '.mov' Multiple Off By Overflows (PoC)
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Quicktime/Itunes Multiple Remote Off By One Overflow Application:...
US-CERT Technical Cyber Security Alert TA07-193A -- Apple Releases Security Updates for QuickTime
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-193A Apple Releases Security Updates for QuickTime Original release date: July 12, 2007 Last revised: -- Source: US-CERT Systems Affected Apple QuickTime on systems running Apple Mac OS X...
Apple multiple applications format string vulnerabilities
Format string vulnerabilities in multiple client applications...
CVE-2007-0463
Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in 1 SWUTMP or 2 SUCATALOG filenames, or using the 3 application/x-apple.sucatalog+xml MIME...
CVE-2007-0463
CVE-2007-0463 describes a format-string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8. The flaw allows remote attackers to trigger a denial of service (app crash) or execute arbitrary code via format string specifiers in (1) SWUTMP, (2) SUCATALOG filenames, or the (3) applicatio...
MOAB-24-01-2007: Apple Software Update Catalog Filename Format String Vulnerability
Summary Apple Software Update is used for delivering patches to end-users, such as the Apple Security Update 2007-001. It relies on the HTTP protocol for retrieving files associated with each available patch, and handles the application/x-apple.sucatalog+xml MIME type and the sucatalog and swutmp...