EUVD-2016-5737

Malware in sbrugna...

Apple OS X Information Disclosure Vulnerability (CNVD-2016-08245)

Apple OS X is a specialized operating system developed by Apple for Mac computers. The SecKeyDeriveFromPassword function in Apple OS X versions prior to 10.12 has an information disclosure vulnerability that can be exploited by an attacker to gain access to sensitive information in process memory...

CVE-2016-4752

The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CFRETURNSRETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation...

Design/Logic Flaw

The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CFRETURNSRETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation...

CVE-2016-4752

The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CFRETURNSRETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation...

CVE-2016-4752: Exposure of Sensitive Information to an Unauthorized Actor

The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CFRETURNSRETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation...

PT-2016-6112

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.12 Description The issue concerns the SecKeyDeriveFromPassword function, which does not use the CF RETAINS RETAINED keyword. This allows attackers to obtain sensitive information from process memory by triggerin...