CVE-2017-11124

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xarunserialize function in archive.c...

Null pointer dereference

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xarunserialize function in archive.c...

DEBIAN-CVE-2017-11124

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xarunserialize function in archive.c...

Null pointer dereference

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xargetpath function in util.c...

CVE-2017-11124

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xarunserialize function in archive.c...

CVE-2017-11125

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xargetpath function in util.c...

CVE-2017-11125

CVE-2017-11125 arises from a NULL pointer dereference in the XAR library: libxar.so in xar 1.6.1, in the function xar_get_path (util.c). The NVD entry lists a high base impact (CVSSv2/3: Partial confidentiality, integrity, and availability impact; network attack vector; no user interaction) with ...

CVE-2017-11124

CVE-2017-11124 concerns the XAR project: libxar.so in xar 1.6.1 contains a NULL pointer dereference in the xar_unserialize function (archive.c). The connected records corroborate the CVE across NVD entries and Fedora advisories, noting the issue alongside related CVEs in xar releases and updates ...

CVE-2017-11124

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xarunserialize function in archive.c...

CVE-2017-11124

libxar.so in xar 1.6.1 has a NULL pointer dereference in the xarunserialize function in archive.c...

Xar 'xar_get_path' Null Pointer Dereference Vulnerability

xar is an open source easily extensible command line utility . A security vulnerability exists in the 'xargetpath' function in the util.c file of the libxar.so file in xar version 1.6.1. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...

PT-2017-11757

Name of the Vulnerable Software and Affected Versions xar version 1.6.1 Description The issue is related to a NULL pointer dereference in the xar unserialize function, located in archive.c, within the libxar.so component of xar. Recommendations For xar version 1.6.1, consider avoiding the use of...

PT-2017-11758

Name of the Vulnerable Software and Affected Versions xar version 1.6.1 Description The issue is related to a NULL pointer dereference in the xar get path function, located in util.c of the libxar.so library in xar. Recommendations For xar version 1.6.1, at the moment, there is no information abo...

The vulnerability of the Mac OS X operating system, which allows a hacker to execute arbitrary code

The vulnerability of the xar component in the Mac OS X operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted archive that triggers the use of uninitialized memory cel...

CVE-2016-7742

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "xar" component, which allows remote attackers to execute arbitrary code via a crafted archive that triggers use of uninitialized memory locations...

CVE-2016-7742

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "xar" component, which allows remote attackers to execute arbitrary code via a crafted archive that triggers use of uninitialized memory locations...

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "xar" component, which allows remote attackers to execute arbitrary code via a crafted archive that triggers use of uninitialized memory locations...

CVE-2016-7742

CVE-2016-7742 affects macOS prior to 10.12.2 via the xar component, where a crafted archive can trigger uninitialized memory and lead to arbitrary code execution. The issue is documented for Apple macOS in the 10.12.2/El Capitan/Yosemite security content, with remediation by updating to macOS 10....

CVE-2016-7742

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "xar" component, which allows remote attackers to execute arbitrary code via a crafted archive that triggers use of uninitialized memory locations...

macOS 10.12.x < 10.12.2 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppleGraphicsPowerManagement - Assets - Audio - Bluetooth - CoreCapture - CoreFoundation - CoreGraphics - CoreMedia...