CVE-2015-7060

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7061...

CVE-2015-7059

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061...

Memory corruption

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061...

CVE-2015-7061

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7060...

CVE-2015-7059

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061...

CVE-2015-7060

CVE-2015-7060 targets Apple platforms with vulnerable ASN.1 decoding in OS X (pre-10.11.2), tvOS (pre-9.1), and watchOS (pre-2.1). A crafted certificate can trigger remote code execution or memory corruption (DoS). Root cause: ASN.1 decoder weakness. Affected components: OS X’s certificate handli...

CVE-2015-7059

Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 are affected by CVE-2015-7059 via a flaw in the ASN.1 decoder that allows remote attackers to trigger memory corruption or arbitrary code execution through a crafted certificate. The report aggregates multiple CVEs in Apple’s 2015...

CVE-2015-7061

CVE-2015-7061 affects Apple OS X prior to 10.11.2, tvOS prior to 9.1, and watchOS prior to 2.1. The issue stems from the ASN.1 decoder handling a crafted certificate, enabling remote code execution or memory corruption. This is a separate vulnerability from CVE-2015-7059 and CVE-2015-7060. Impact...

PT-2015-3118

Name of the Vulnerable Software and Affected Versions Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the ASN.1 decoder of the Mac OS X operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a...

PT-2015-3119

Name of the Vulnerable Software and Affected Versions Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the ASN.1 decoder of the Mac OS X operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a...

PT-2015-3120

Name of the Vulnerable Software and Affected Versions Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the ASN.1 decoder of the Mac OS X operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a...

CVE-2015-7061: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7060...

CVE-2015-7059: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061...

Heap overflow

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services NSS before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service application crash or possibly...

CVE-2015-7182

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services NSS before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service application crash or possibly...

CVE-2015-7182: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services NSS before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service application crash or possibly...

CVE-2015-7182

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services NSS before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service application crash or possibly...

UBUNTU-CVE-2015-7182

Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services NSS before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR 38.x before 38.4 and other products, allows remote attackers to cause a denial of service application crash or possibly...

PT-2015-2640

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions prior to 3.19.2.1 Mozilla Network Security Services NSS versions 3.20.x prior to 3.20.1 Firefox versions prior to 42.0 Firefox ESR 38.x versions prior to 38.4 Description The issue is caused by a...

OracleVM 2.1 : krb5 (OVMSA-2009-0003)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-0844 The getinputtoken function in the SPNEGO implementation in MIT Kerberos 5 aka krb5 1.5 through 1.6.3 allows remote attackers to cause a denial of service daemon crash and possibly obtain...