SUSE CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

(Pwn2Own) Netatalk parse_entries Improper Handling of Exceptional Conditions Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

Netatalk 安全漏洞

Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. Netatalk suffers from a security vulnerability that stems from a lack of proper error handling when parsing AppleDouble entries. An attacker could exploit the vulnerability t...

CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

UBUNTU-CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

PT-2022-15865 · Netatalk +4 · Netatalk +4

Name of the Vulnerable Software and Affected Versions: Netatalk affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within th...

Samba AppleDouble Entry Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samba. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of AppleDouble entries. The issue results from the lack of proper validation of the...

Apple Mac OS X Multiple Vulnerabilities -03 (Sep 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Out-of-bounds

The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted AppleDouble file in a ZIP archive...

Memory corruption

The getxattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service memory corruption or have unspecified other impact via an invalid file on an...

CVE-2013-3955

The getxattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service memory corruption or have unspecified other impact via an invalid file on an...

Stack overflow

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a...

CVE-2008-4508

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a...

CVE-2007-6165

Mail in Apple Mac OS X Leopard 10.5.1 allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment containing an apparently-safe file type and script in a resource fork, which does not warn the user that a separate program is going to be executed. NOTE: this is a...

Design/Logic Flaw

Mail in Apple Mac OS X Leopard 10.5.1 allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment containing an apparently-safe file type and script in a resource fork, which does not warn the user that a separate program is going to be executed. NOTE: this is a...

CVE-2007-6165

CVE-2007-6165 affects Mac OS X Mail.app on Leopard (10.5.1). The vulnerability allows user-assisted remote code execution via an AppleDouble attachment whose file type appears safe but contains a script in the resource fork, without warning that a separate program will run. This is a regression r...

Apple Mail remote command execution vulnerability

Overview Apple Mail contains a vulnerability that may allow an attacker to execute arbitrary commands on OS X Leopdard 10.5 systems. Description Apple OS X uses resource forks to store structured data in files. Data forks are used to store unstructured data.The AppleDouble standard is specified i...

Apple Mail邮件附件处理代码执行漏洞

BUGTRAQ ID: 26510 Apple Mail是苹果操作系统中所捆绑的邮件客户端。 Apple Mail在处理畸形的邮件附件时存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行恶意命令。 Mac操作系统上的文件可能包含有额外的信息，例如其他程序打开文件所要使用的信息。操作系统将这些文件储存在链接到文件的名为resource fork的文件系统中。通常仅有本地系统才可以访问这类信息，但对于邮件，MIME格式AppleDouble允许附带resource fork，并由Apple Mail自动分析。...

CVE-2006-0396

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an...

Buffer overflow

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an...