Apple macOS Sierra ATS memory corruption vulnerability

Apple macOS Sierra is a specialized operating system developed for Mac computers. A memory corruption vulnerability exists in the ATS of Apple macOS Sierra, allowing remote attackers to exploit the vulnerability to build malicious applications that execute arbitrary code with kernel privileges...

macOS 10.12.x < 10.12.1 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.12.x prior to macOS 10.12.1. It is, therefore, affected by multiple vulnerabilities in the following components : - ATS - AppleMobileFileIntegrity - AppleSMC - CFNetwork Proxies - CoreGraphics - FaceTime - FontParser - IDS - Connectivity...

Apple OS X ATS Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Apple Type Service ATS is one of the font type services. A memory corruption vulnerability exists in ATS in Apple OS X versions prior to 10.12. A remote attacker can exploit this vulnerability to execute arbitrary...

Memory corruption

Apple Type Services ATS in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2016-4779

Apple Type Services ATS in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2016-4779

The connected Apple security document HT207170 confirms CVE-2016-4779 affects the ATS component in OS X prior to 10.12, where processing a maliciously crafted font file can lead to arbitrary code execution or memory corruption. It documents this issue under the ATS entry in the macOS Sierra 10.12...

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

About the security content of macOS Sierra 10.12

About the security content of macOS Sierra 10.12 This document describes the security content of macOS Sierra 10.12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

Oracle ATS Arbitrary File Upload

No description provided by source...

Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities

Binary data 9324.prm...

Oracle Application Testing Suite (ATS) - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle ATS Arbitrary File Upload', 'Description' = %q This module exploits an authentication bypass and arbitrary file upload in Oracle Applicatio...

Oracle ATS Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle ATS Arbitrary File Upload', 'Description' = %q This module exploits an authentication bypass and arbitrary file upload in Oracle Applicatio...

CVE-2016-1796

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds memory access via a crafted app...

Out-of-bounds

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds memory access via a crafted app...

Design/Logic Flaw

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1796

CVE-2016-1796 affects Apple Type Services (ATS) in OS X El Capitan before 10.11.5. The ZDI advisory describes a heap-based buffer overflow in libATSServer’s GetUncompressedBitmapRepresentation that can allow arbitrary code execution on vulnerable systems, typically requiring the user to visit a m...

CVE-2016-1797

CVE-2016-1797 corresponds to Apple OS X El Capitan ATS sandbox-escape via FontValidator. A crafted app could bypass the FontValidator sandbox policy, allowing arbitrary code execution with system/kernel privileges. ZDI-16-360 describes the flaw as within the fontd sandbox policy, enabling an atta...

Oracle ATS Arbitrary File Upload

This module exploits an authentication bypass and arbitrary file upload in Oracle Application Testing Suite OATS, version 12.4.0.2.0 and unknown earlier versions, to upload and execute a JSP shell. This module requires Metasploit: https://metasploit.com/download Current source:...

Oracle Application Testing Suite (ATS) 12.4.0.2.0 - Authentication Bypass / Arbitrary File Upload

Exploit Title: Oracle Application Testing Suite Authentication Bypass and Arbitrary File Upload Remote Exploit Exploit Author: Zhou Yu Vendor Homepage: http://www.oracle.com/ Software Link: http://www.oracle.com/technetwork/oem/downloads/apptesting-downloads-1983826.html?ssSourceSiteId=otncn...

APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007

APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007 OS X El Capitan 10.11.1 and Security Update 2015-007 are now available and address the following: Accelerate Framework Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan 10.11 Impact: Visiti...