995 matches found
Design/Logic Flaw
The dohfstruncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service kernel panic via a crafted HFS+ filesystem in a DMG image, which causes an access of an invalid vnode structure during file removal...
Apple Mac OS X DMG HFS+ DO_HFS_TRUNCATE拒绝服务漏洞
Apple Mac OS X是一款基于BSD的苹果公司开发的操作系统。 Apple Mac OS X处理恶意DMG文件中的HFS+文件系统存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击，可能以系统进程权限执行任意指令。 问题存在与dohfstruncate，当尝试从挂接文件系统中删除文件时，特殊构建的HFS+文件系统可导致dohfstruncate函数触发内核错误而造成拒绝服务攻击。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有解决方案： http://www.apple.com/macosx/ 可测试如下DMG文...
CVE-2007-0318
The CVE-2007-0318 entry affects Mac OS X 10.4.8 and arises from the do_hfs_truncate function. A crafted HFS+ filesystem in a DMG image can trigger an access of an invalid vnode structure during file removal, leading to a kernel panic (DoS). No explicit remediation is provided in the supplied docu...
CVE-2007-0318
The dohfstruncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service kernel panic via a crafted HFS+ filesystem in a DMG image, which causes an access of an invalid vnode structure during file removal...
MOAB-13-01-2007: Apple DMG HFS+ do_hfs_truncate() Denial of Service Vulnerability
Summary A specially crafted HFS+ filesystem in a DMG image can cause the dohfstruncate function to panic the kernel denial of service, when attempting to remove a file from the mounted filesystem. This issue can't lead to arbitrary code execution, although there's a significant risk of local HFS+...
Mac OS X / Apple Finder multiple file system parsing vulnerabilities
Buffer overflow on oversized DMG volume label in Apple Finder. Integer overflows on UFS DMG image parsing. DoS on processing UFS and HFS+ volumes...
Apple Mac OSX 10.4.8 - DMG HFS+ DO_HFS_TRUNCATE Denial of Service
Apple Mac OSX 10.4.8 - DMG HFS+ DOHFSTRUNCATE Denial of Service source: https://www.securityfocus.com/bid/22042/info Apple Mac OS X is prone to a denial-of-service vulnerability when handling a DMG image containing a specially crafted HFS+ filesystem. A successful exploit can allow an attacker to...
Apple Mac OSX 10.4.8 - DMG HFS+ DO_HFS_TRUNCATE Denial of Service
source: https://www.securityfocus.com/bid/22042/info Apple Mac OS X is prone to a denial-of-service vulnerability when handling a DMG image containing a specially crafted HFS+ filesystem. A successful exploit can allow an attacker to cause a kernel panic, resulting in a denial-of-service conditio...
CVE-2006-6056
Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service crash via a malformed file stream that triggers a NULL pointer dereference in the superblockdoinit function, as demonstrated using an HFS filesystem image...
CVE-2006-6056
Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service crash via a malformed file stream that triggers a NULL pointer dereference in the superblockdoinit function, as demonstrated using an HFS filesystem image...
CVE-2006-6062
Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service crash via a malformed UDTO HFS+ disk image, such as with "bad sectors," which triggers memory corruption...
CVE-2006-6056
Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service crash via a malformed file stream that triggers a NULL pointer dereference in the superblockdoinit function, as demonstrated using an HFS filesystem image...
CVE-2006-6062
CVE-2006-6062 affects Apple Mac OS X 10.4.8 (and possibly newer/other builds) and is triggered by processing malformed UDTO HFS+ disk images, which can cause memory corruption and a remote denial-of-service (crash). Public sources describe this as a vulnerability in handling corrupted UDTO HFS+ i...
CVE-2006-6056
CVE-2006-6056 affects Linux kernel 2.6.x up to 2.6.18 with SELinux hooks enabled. It causes a local denial of service (crash) via a malformed file stream that triggers a NULL pointer dereference in superblock_doinit when using an HFS filesystem image. Connected advisories (e.g., RHSA/CESA) indica...
CVE-2006-6062
Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service crash via a malformed UDTO HFS+ disk image, such as with "bad sectors," which triggers memory corruption...
Ubuntu 4.10 / 5.04 : linux-source-2.6.10, linux-source-2.6.8.1 vulnerabilities (USN-199-1)
A Denial of Service vulnerability was discovered in the syssetmempolicy function. By calling the function with a negative first argument, a local attacker could cause a kernel crash. CAN-2005-3053 A race condition was discovered in the handling of shared memory mappings with CLONEVM. A local...
USN-199-1: Linux kernel vulnerabilities
A Denial of Service vulnerability was discovered in the syssetmempolicy function. By calling the function with a negative first argument, a local attacker could cause a kernel crash. CAN-2005-3053 A race condition was discovered in the handling of shared memory mappings with CLONEVM. A local...
Multiple Linux kernel vulnerabilities
syssetmempolicy negative argument DoS, race CLONEVM DoS conditions, race TASKTRACED state DoS conditions, ioremap amd64 platform memory access, HFS and HFS+ filesystem drivers DoS, remote ebtables netfilter module remote DoS on SMP platforms...