Lucene search
K

15 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.29 views

Apple macOS AudioCodecs LOAS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Deserializ...

3.3CVSS3.7AI score0.00321EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/06/25 12:0 a.m.70 views

Apple macOS AudioCodecs LOAS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the USACBitstreamReade...

7.8CVSS6.6AI score0.00296EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.41 views

Apple macOS AudioCodecs MP4 File Parsing Signed to Unsigned Conversion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

7.8CVSS5.6AI score0.00482EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.47 views

Apple macOS AudioCodecs MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

7.8CVSS5.5AI score0.00522EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/12/04 12:0 a.m.64 views

Apple macOS AudioCodecs AAC Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

7.8CVSS3.6AI score0.00646EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/12/03 12:0 a.m.38 views

Apple macOS AudioCodecs Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs module...

7.8CVSS3.6AI score0.0086EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/10/25 12:0 a.m.36 views

Apple macOS AudioCodecs Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs...

7.8CVSS3.7AI score0.00433EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/17 12:0 a.m.29 views

QuickTime get_by_tree Memory Corruption Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodecs...

5.3CVSS2AI score0.00679EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/22 12:0 a.m.43 views

Apple macOS AudioCodecs Memory Corruption Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.3AI score0.00433EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/06/07 12:0 a.m.31 views

Apple macOS ACGetNewAU Memory Corruption Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioCodec...

3.3CVSS2.5AI score0.00679EPSS
Exploits0References1
securityvulns
securityvulns
added 2009/09/15 12:0 a.m.60 views

[TKADV2009-007] Apple iPhone OS AudioCodecs Heap Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Apple iPhone OS AudioCodecs Heap Buffer Overflow Advisory ID: TKADV2009-007 Revision: 1.0 Release Date: 2009/09/09 Last Modified: 2009/09/09 Date Reported: 2009/04/05 Author: Tobias Klein tk at trapkit.de Affected Software: iPhone OS 1.0...

6.8CVSS0.05067EPSS
Exploits1
NVD
NVD
added 2009/09/10 9:30 p.m.14 views

CVE-2009-2206

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted 1 AAC or 2 MP3 file, a...

6.8CVSS7.7AI score0.05067EPSS
Exploits1References8
ATTACKERKB
ATTACKERKB
added 2009/09/10 9:30 p.m.4 views

CVE-2009-2206

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted 1 AAC or 2 MP3 file, a...

6.8CVSS6.4AI score0.05067EPSS
Exploits1References9
Cvelist
Cvelist
added 2009/09/10 9:0 p.m.22 views

CVE-2009-2206

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted 1 AAC or 2 MP3 file, a...

7.7AI score0.05067EPSS
Exploits1References8
CVE
CVE
added 2009/09/10 9:0 p.m.48 views

CVE-2009-2206

The CVE-2009-2206 issue affects Apple iPhone OS AudioCodecs (CoreAudio) where multiple heap-based buffer overflows occur while parsing AAC/MP3 streams. Vulnerable on iPhone OS <3.1 and iPod touch

6.8CVSS7.9AI score0.05067EPSS
Exploits1References8Affected Software1
Rows per page
Query Builder