Lucene search
+L

2207 matches found

NVD
NVD
added 2007/08/03 10:17 a.m.15 views

CVE-2007-2406

Quartz Composer on Apple Mac OS X 10.4.10 does not initialize a certain object pointer, which might allow user-assisted remote attackers to execute arbitrary code via a crafted Quartz Composer file...

6.8CVSS7.2AI score0.03222EPSS
SaveExploits1References6
CVE
CVE
added 2007/08/03 10:0 a.m.47 views

CVE-2007-2406

CVE-2007-2406 affects Apple Mac OS X 10.4.10 where Quartz Composer fails to initialize a certain object pointer, enabling user‑assisted remote execution of arbitrary code via a crafted Quartz Composer file. The vulnerability stems from an uninitialized object pointer in the Quartz Composer compon...

6.8CVSS7.2AI score0.03222EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2007/08/03 10:0 a.m.22 views

CVE-2007-2406

Quartz Composer on Apple Mac OS X 10.4.10 does not initialize a certain object pointer, which might allow user-assisted remote attackers to execute arbitrary code via a crafted Quartz Composer file...

7.2AI score0.03222EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2007/08/02 12:0 a.m.86 views

Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

10CVSS8AI score0.90768EPSS
SaveExploits69References45
seebug.org
seebug.org
added 2006/12/20 12:0 a.m.46 views

Apple Mac OS X Quicktime For Java信息泄露漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X Quicktime For Java实现上存在漏洞,远程攻击者可能利用此漏洞获取用户本地图形相关的信息。 Java Applet可以使用Mac OS X所捆绑的QuickTime for Java通过嵌入的QuickTime对象获得在屏幕上所渲染的图形,并将图形上传到Web站点。如果结合Quartz Composer使用这个工具的话,就可能捕获包含有本地信息的图形。 Apple Mac OS X 10.4.8 Apple MacOS X Server 10.4.8...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2006/12/20 12:0 a.m.25 views

Mac OS X Security Update 2006-008

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2006-008 applied. This update fixes a flaw in QuickTime that may allow a rogue website to obtain the images rendered on the user screen. By combining this flaw with Quartz Composer, an attacker may be able to...

2.6CVSS5.6AI score0.02022EPSS
SaveExploits0References2
NVD
NVD
added 2006/08/14 11:4 p.m.15 views

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

7.5CVSS8AI score0.08728EPSS
SaveExploits1References10
CVE
CVE
added 2006/08/14 11:0 p.m.54 views

CVE-2006-4132

The CVE-2006-4132 entry affects ArcSoft MMS Composer versions 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier. The vulnerability enables remote impact via WAPPush messages sent to UDP port 2948, causing resource exhaustion and application crash (denial of service). The available s...

5CVSS7.2AI score0.02353EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2006/08/14 11:0 p.m.47 views

CVE-2006-4131

ArcSoft MMS Composer is affected by multiple buffer overflows in MMS parsers (M-Notification.ind, M-Retrieve.conf, and SMIL parsers) affecting versions 1.5.5.6 and 2.0.0.13 (and possibly earlier). This can allow remote attackers to crash the application or execute arbitrary code via crafted MMS m...

7.5CVSS8.3AI score0.08728EPSS
SaveExploits1References10Affected Software1
Cvelist
Cvelist
added 2006/08/14 11:0 p.m.21 views

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

6.8AI score0.02353EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2006/08/14 11:0 p.m.18 views

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

8AI score0.08728EPSS
SaveExploits1References10
securityvulns
securityvulns
added 2006/08/10 12:0 a.m.46 views

Multiple ArcSoft MMS Composer for PocketPC security vulnerabilities

Multiple vulnerabilities with DoS and code execution impacts on MMS receiving...

3.1AI score
SaveExploits0References1Affected Software1
zdt
zdt
added 2006/08/09 12:0 a.m.38 views

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================= PocketPC MMS Composer WAPPush Denial of Service Exploit ========================================================= / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Compose...

7AI score
SaveExploits0
exploitpack
exploitpack
added 2006/08/09 12:0 a.m.25 views

PocketPC Mms Composer - WAPPush Denial of Service

PocketPC Mms Composer - WAPPush Denial of Service / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org...

SaveExploits0
exploitpack
exploitpack
added 2006/08/09 12:0 a.m.17 views

ArcSoft Mms Composer 1.5.52.0 - Multiple Vulnerabilities

ArcSoft Mms Composer 1.5.52.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/19451/info ArcSoft MMS Composer is affected by multiple vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits can allow remote attackers to cause...

0.3AI score
SaveExploits0
seebug.org
seebug.org
added 2006/08/09 12:0 a.m.15 views

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

No description provided by source. / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner [email protected] http://www.trifinite.org...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/08/09 12:0 a.m.24 views

ArcSoft Mms Composer 1.5.5/2.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/19451/info ArcSoft MMS Composer is affected by multiple vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits can allow remote attackers to cause denial-of-service conditions and to execute arbitrary machine code in...

7.5CVSS5.8AI score0.08728EPSS
SaveExploits1
Exploit DB
Exploit DB
added 2006/08/09 12:0 a.m.50 views

PocketPC Mms Composer - 'WAPPush' Denial of Service

/ This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org http://www.mulliner.org/pocketpc/ NotfiFlood - a...

5.8AI score
SaveExploits0
CVE
CVE
added 2005/08/19 4:0 a.m.63 views

CVE-2005-2515

The CVE-2005-2515 entry concerns Quartz Composer Screen Saver in Mac OS X 10.4.2. Affected component: the Screen Saver subsystem (Quartz Composer Screen Saver). Root cause / vulnerability: local users can access links from the RSS Visualizer even when a password is required, enabling partial conf...

4.6CVSS8.9AI score0.00369EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2005/08/19 4:0 a.m.25 views

CVE-2005-2515

Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required...

4.6CVSS8.8AI score0.00369EPSS
SaveExploits0References3
Rows per page
Query Builder