USN-2987-1 libgd2 vulnerabilities

It was discovered that the GD library incorrectly handled certain color tables in XPM images. If a user or automated system were tricked into processing a specially crafted XPM image, an attacker could cause a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS...

Apple TV < 9.1 Multiple Vulnerabilities

Binary data 9334.prm...

Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities

Binary data 9325.prm...

Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities

Binary data 9324.prm...

Apple iOS < 9.1 Multiple Vulnerabilities

Binary data 9328.prm...

Debian DLA-486-1 : imagemagick security update (ImageTragick)

Nikolay Ermishkin from the Mail.Ru Security Team and Stewie discovered several vulnerabilities in ImageMagick, a program suite for image manipulation. These vulnerabilities, collectively known as ImageTragick, are the consequence of lack of sanitization of untrusted input. An attacker with contro...

Apple OS X El Capitan Disk Utility Denial of Service Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. A security vulnerability in Apple OS X El Capitan Disk Utility allows attackers to exploit the vulnerability to prevent the program from compressing and encrypting disk images...

Apple iOS/watchOS/tvOS and OS X El Capitan Disk Images Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for Apple's cell phones.OS X El Capitan is a dedicated operating system for Mac computers.watchOS is a smartwatch operating system. A security vulnerability in Disk Images in Apple iOS, watchOS, and OS X El Capitan allows attackers to submit a special request to...

Apple iOS/watchOS/tvOS and OS X El Capitan Disk Images Competitive Conditions Vulnerability

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a specialized operating system developed for Mac computers. watchOS is a smartwatch operating system. A competitive condition vulnerability exists in Disk Images in Apple iOS, watchOS, and OS X El Capitan that allows an...

CVE-2016-1809

Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors...

CVE-2016-1809

Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors...

CVE-2016-1808

The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-1808

The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-1807

Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors...

CVE-2016-1807

Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors...

Race condition

Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors...

Code injection

Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors...

CVE-2016-1807

CVE-2016-1807 affects Apple’s Disk Images subsystem across iOS (before 9.3.2), OS X (before 10.11.5), tvOS (before 9.2.1), and watchOS (before 2.2.1). The vulnerability is a race condition in Disk Images parsing/handling that can allow a local user to read kernel memory, i.e., obtain sensitive in...

CVE-2016-1808

CVE-2016-1808 concerns a memory corruption issue in the Disk Images parsing path that could allow an attacker to execute arbitrary code in the kernel context on affected Apple platforms. Affected products/versions include iOS prior to 9.3.2, OS X prior to 10.11.5, tvOS prior to 9.2.1, and watchOS...

CVE-2016-1809

CVE-2016-1809 affects OS X El Capitan Disk Utility prior to 10.11.5. Disk Utility used incorrect encryption keys for disk images, potentially failing to encrypt/compress disk images. Apple’s update to 10.11.5 (Security Update 2016-003) fixes this (per HT206567).