EUVD-2016-2897

Malware in sbrugna...

About the security content of tvOS 9.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

About the security content of watchOS 2.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

Apple iOS < 10.0 Multiple Vulnerabilities

Binary data 9619.prm...

Apple iOS and OS X CommonCrypto Information Disclosure Vulnerability

Apple iOS and OS X are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; Apple OS X is developed for Mac computers.CommonCrypto is one of the encryption and decryption libraries. An information disclosure vulnerability exists in CCrypt in corecrypto in Apple iOS...

CVE-2016-4711

CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output...

CVE-2016-4711

CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output...

Input validation

CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output...

CVE-2016-4711

The CVE-2016-4711 entry applies to CCrypt in corecrypto within CommonCrypto, affecting iOS before 10 and macOS before 10.12. Description: an input/output buffer aliasing issue allows an attacker to recover plaintext by a function call that uses the same buffer for input and output. Impact: inform...

CVE-2016-4711

CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output...

CVE-2016-4711: Improper Input Validation

CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output...

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to obtain confidential information

The vulnerability of the CCCrypt component in the CommonCrypto operating systems for iOS and Mac OS X exists due to incorrect return values when calculating the key length. Exploiting this vulnerability can allow a malicious actor to obtain confidential information through a specially created...

Apple iOS/watchOS/tvOS and OS X El Capitan CommonCrypto Sensitive Information Disclosure Vulnerability

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. Apple iOS, watchOS, and OS X El Capitan have a security vulnerability in CommonCrypto that allows attackers to exploit th...

CVE-2016-1802

CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app...

CVE-2016-1802

CVE-2016-1802 affects Apple platforms via a CommonCrypto (CCCrypt) issue: return-value handling during key-length calculations allows a crafted app to obtain sensitive information. Public sources in the Apple security content show the vulnerability and assign CVE-2016-1802 to the CommonCrypto ent...

CVE-2016-1802: Exposure of Sensitive Information to an Unauthorized Actor

CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app...

About the security content of watchOS 2.2.1

About the security content of watchOS 2.2.1 This document describes the security content of watchOS 2.2.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available...