CVE-2015-3716

Spotlight in Apple OS X before 10.10.4 allows attackers to execute arbitrary commands via a crafted name of a photo file within the local photo library...

Apple MAC OS X Spotlight Command Injection Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability in Apple Mac OS X Spotlight's handling of image filenames allows attackers to exploit the vulnerability to trick users into searching for malicious files, injecting commands, and executing them...

Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl - AppleThunderboltEDMService - ATS - Bluetooth -...

Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-005. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl -...

Apple Mac OS X 10.11 'El Capitan' Update unveiled at WWDC 2015

After Google made its Android users happy by unveiling new features in Google I/O developer conference last month, it’s now time for Apple fans…WWDC 2015 event is upon us. Apple’s Worldwide Developers Conference is going on in San Francisco and the company has many new surprises for its users. On...

CVE-2014-8839

Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages" configuration, which allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this image's URL...

CVE-2014-8833

SpotlightIndex in Apple OS X before 10.10.2 does not properly perform deserialization during access to a permission cache, which allows local users to read search results associated with other users' protected files via a Spotlight query...

CVE-2014-8832

The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local users to obtain sensitive information by reading from this drive...

Design/Logic Flaw

The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local users to obtain sensitive information by reading from this drive...

Code injection

Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages" configuration, which allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this image's URL...

CVE-2014-8832

The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local users to obtain sensitive information by reading from this drive...

CVE-2014-8832

The CVE-2014-8832 issue affects Spotlight indexing on Apple OS X prior to 10.10.2, where memory contents could be written to an external hard drive, enabling local users to read sensitive data from that drive. The vulnerability is tied to Spotlight’s indexing flow and memory handling. The documen...

CVE-2014-8833

SpotlightIndex in Apple OS X before 10.10.2 does not properly perform deserialization during access to a permission cache, which allows local users to read search results associated with other users' protected files via a Spotlight query...

Mac OS X Multiple Vulnerabilities (Security Update 2015-001) (POODLE)

The remote host is running a version of Mac OS X 10.8 or 10.9 that does not have Security Update 2015-001 applied. This update contains several security-related fixes for the following components : - AFP Server - Bluetooth - CoreGraphics - CoreSymbolication - FontParser - Foundation - Intel...

Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE)

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.2. This update contains several security-related fixes for the following components : - bash - Bluetooth - CFNetwork Cache - CommerceKit Framework - CoreGraphics - CoreSymbolication - CPU Software - FontParser...

Apple MAC OS X Yosemite Information Disclosure Vulnerability (CNVD-2015-00758)

Apple MAC OS X Yosemite is the latest operating system developed by Apple. An information disclosure vulnerability exists in Apple MAC OS X Yosemite Spotlight, which allows attackers to exploit the vulnerability to cause sensitive memory to be written to an external hard disk...

Apple MAC OS X Yosemite Information Disclosure Vulnerability (CNVD-2015-00761)

Apple MAC OS X Yosemite is the latest operating system developed by Apple. Apple MAC OS X Yosemite Spotlight fails to check the status of Mail's "Load remote content in messages" setting, which can result in the sender of an email being able to determine the recipient's IP address information...

Apple MAC OS X Yosemite Information Disclosure Vulnerability (CNVD-2015-00759)

Apple MAC OS X Yosemite is the latest operating system developed by Apple. Apple MAC OS X Yosemite Spotlight Handling Permissions Cache has deserialization that allows Spotlight to display information about files belonging to other users...

OS X Spotlight vulnerability will reveal the IP address and other system details-vulnerability warning-the black bar safety net

! OS X mail users using the OS X Spotlight search function, it will display in the search results message. Spotlight ignores mail the application to the remote content of the prohibited load, and the remote mail file as the search process is loaded. When Spotlight finished loading can track The...

APPLE-SA-2014-11-17-2 OS X Yosemite 10.10.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-2 OS X Yosemite 10.10.1 OS X 10.10.1 is now available and addresses the following: CFNetwork Available for: OS X Yosemite v10.10 Impact: Website cache may not be fully cleared after leaving private browsing Description: A privacy...