EUVD-2009-0158

Malware in sbrugna...

EUVD-2008-0995

Malware in sbrugna...

EUVD-2008-3631

Malware in sbrugna...

EUVD-2007-0357

Malware in sbrugna...

MySQL <= 6.0 yaSSL <= 1.7.5 - Hello Message Buffer Overflow

MySQL yaSSL SSL Hello Message Buffer Overflow 1. 漏洞介绍和分析 yaSSL是用于实现SSL的开源软件包。 yaSSL实现上存在多个远程溢出及无效内存访问问题，远程攻击者可能利用此漏洞控制服务器。 向堆栈缓冲区溢出的yaSSL1.7.5和更早的版本实现与MySQL捆绑 = 6.0。通过发送一个专门制作的HEllo 包 ，攻击者可以执行任意代码。 代码分析： 用于包含客户端所接收的Hello报文中的数据的缓冲区结构如下源自yasslimp.hpp： class ClientHello : public HandShakeBase...

Format string

Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in an application name...

Heap overflow

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."...

Design/Logic Flaw

Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better...

CVE-2008-3634

Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by a host firewall, exposes a misleading firewall-status prompt. The underlying issue is a UI/security information mismatch in iTunes Music Sharing that could mislead administrators about firewall protec...

Race condition

Race condition in NSXML in Foundation for Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a crafted XML file, related to "error handling logic."...

Race condition

Race condition in the NSURLConnection cache management functionality in Foundation for Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via unspecified manipulations that cause messages to be sent to a deallocated object...

CVE-2008-0058

Race condition in the NSURLConnection cache management functionality in Foundation for Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via unspecified manipulations that cause messages to be sent to a deallocated object...

CVE-2008-0058

Race condition in the NSURLConnection cache management functionality in Foundation for Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via unspecified manipulations that cause messages to be sent to a deallocated object...

CVE-2008-0988

Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of service crash via crafted arguments that trigger a buffer over-read...

CVE-2008-0059

Race condition in NSXML in Foundation for Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a crafted XML file, related to "error handling logic."...

CVE-2008-0056

Apple Mac OS X 10.4.11 is affected by a stack-based buffer overflow in Foundation’s NSFileManager triggered by an unusually long pathname. The issue allows context-dependent attackers to execute arbitrary code. The vulnerability stems from a overflow in NSFileManager when handling a path with an ...

CVE-2008-0988

This CVE affects Apple Mac OS X 10.4.11 where Libsystem’s strnstr(3) has an off-by-one in its implementation, allowing a context-dependent attacker to trigger a buffer over-read, potentially causing a crash. The connected sources confirm the vulnerability detail and the affected platform, but do ...

Stack overflow

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via the a long file name to the NSDocument API...

Stack overflow

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted PostScript Printer Description PPD file that is not properly handled when querying a network printer...

Cross site scripting

Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown manipulations of Kerberos principal realm names...