Unfixed XSS vulnerability at search6.fact-finder.de

Security researcher Darkster, has submitted on 23/07/2007 a cross-site-scripting XSS vulnerability affecting search6.fact-finder.de, which at the time of submission ranked 90028 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/08/2007. It is...

Unfixed XSS vulnerability at www.cattle-finder.com

Security researcher TreX, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting www.cattle-finder.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is currently...

Mac OS X Multiple Vulnerabilities (Security Update 2007-002)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2007-002 applied. This update fixes security flaws in the following applications : - Finder - iChat - UserNotification C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc";...

Apple Mac OS X Finder DMG volume name buffer overflow

Overview Apple Mac OS X Finder fails to properly handle DMG files with large volume names, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description DMG files are disk images that can contain a variety of filesystems. Apple Mac OS X Finder...

Mac OS X / Apple Finder multiple file system parsing vulnerabilities

Buffer overflow on oversized DMG volume label in Apple Finder. Integer overflows on UFS DMG image parsing. DoS on processing UFS and HFS+ volumes...

Apple Mac OS X Finder DMG卷标内存破坏漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 Apple Mac OS X所捆绑的Finder程序在处理超长的卷标名时存在内存破坏漏洞，远程攻击者可能利用此漏洞控制用户机器。 如果攻击者能够诱骗用户加载包含有大于255字节卷标名称的DMG镜像的话，就会触发这个漏洞，导致拒绝服务或执行任意指令。 Apple Mac OS X 10.4.8 Apple MacOS X Server 10.4.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com !/usr/bin/ruby c 2006...

Memory corruption

Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption...

CVE-2007-0197

Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption...

CVE-2007-0197

Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption...

CVE-2007-0197

Affected product: Apple Mac OS X Finder on Mac OS X 10.4.8. Vulnerable component: DMG disk image volume name handling in Finder. Root cause: memory corruption due to a long DMG volume name (buffer/bounds issue). Impact: remote attackers could cause denial of service and possibly arbitrary code ex...

DMA[2007-0109a] - 'Apple Finder Disk Image Volume Label Overflow / DoS'

DMA2007-0109a - 'Apple Finder Disk Image Volume Label Overflow / DoS' Author: Kevin Finisterre Vendors: http://www.apple.com Product: '= OSX 10.4 ?' References: http://www.digitalmunition.com/DMA2007-0109a.txt http://www.apple.com/macosx/features/finder/...

Mac OS X 10.4.8 Apple Finder DMG Volume Name Memory Corruption PoC

Exploit for macOS platform in category dos / poc ================================================================== Mac OS X 10.4.8 Apple Finder DMG Volume Name Memory Corruption PoC ================================================================== !/usr/bin/ruby c 2006 LMH . require 'fileutils'...

Apple Mac OSX 10.4.8 - Apple Finder DMG Volume Name Memory Corruption (PoC)

Apple Mac OSX 10.4.8 - Apple Finder DMG Volume Name Memory Corruption PoC !/usr/bin/ruby c 2006 LMH . require 'fileutils' require 'zlib' hdiutil = "/usr/bin/hdiutil" dmgname = ARGV0 || "MOAB-09-01-2007.dmg" dmgsize = ARGV1 || "200k" filesys = ARGV2 || "UFS" volname = "" 255.times do volname i =...

Mac OS X 10.4.8 Apple Finder DMG Volume Name Memory Corruption PoC

No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at infopull.com. require 'fileutils' require 'zlib' hdiutil = "/usr/bin/hdiutil" dmgname = ARGV0 || "MOAB-09-01-2007.dmg" dmgsize = ARGV1 || "200k" filesys = ARGV2 || "UFS" volname = "" 255.times do volname i = Kernel.rand62; i += i...

Apple Mac OSX 10.4.8 - Apple Finder DMG Volume Name Memory Corruption (PoC)

!/usr/bin/ruby c 2006 LMH . require 'fileutils' require 'zlib' hdiutil = "/usr/bin/hdiutil" dmgname = ARGV0 || "MOAB-09-01-2007.dmg" dmgsize = ARGV1 || "200k" filesys = ARGV2 || "UFS" volname = "" 255.times do volname i = Kernel.rand62; i += i 10 ? 48 : i 36 ? 55 : 61 .chr end FileUtils.rmfdmgnam...

Apple Mac OS X 2006-007更新修复多个安全漏洞

Mac OS X是苹果家族计算机所使用的操作系统。 Apple 2006-007安全更新修复了Mac OS X中的多个安全漏洞，具体包括： CVE-2006-4396 Apple Type Services服务程序不安全地创建了错误日志文件，允许本地攻击者以系统权限覆盖或创建文件。 CVE-2006-4398 Apple Type Services服务程序中存在多个缓冲区溢出漏洞。本地攻击者可以通过发送特制的服务请求触发这些溢出，导致拒绝服务或以系统权限执行任意指令。 CVE-2006-4400 Apple Type...

CVE-2006-4402

Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary code by browsing directories containing crafted .DSStore files...

CVE-2006-4402

Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary code by browsing directories containing crafted .DSStore files...

Apple Mac OS X Finder fails to properly handle malformed .DS_Store files

Overview Apple Finder fails to properly handle malformed .DSStore files. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description .DSStore files are hidden files used by Apple Finder to control the display of a folder and its contents.According to App...

Mac OS X Multiple Vulnerabilities (Security Update 2006-007)

The remote host is running a version of Mac OS X which does not have the security update 2006-007 applied. Security Update 2006-007 contains several security fixes for the following programs : - AirPort - ATS - CFNetwork - Finder - Font Book - Font Importer - Installer - OpenSSL - PHP - PPP - Sam...