Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

Apple Mac OS X Quicktime For Java信息泄露漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X Quicktime For Java实现上存在漏洞，远程攻击者可能利用此漏洞获取用户本地图形相关的信息。 Java Applet可以使用Mac OS X所捆绑的QuickTime for Java通过嵌入的QuickTime对象获得在屏幕上所渲染的图形，并将图形上传到Web站点。如果结合Quartz Composer使用这个工具的话，就可能捕获包含有本地信息的图形。 Apple Mac OS X 10.4.8 Apple MacOS X Server 10.4.8...

Mac OS X Security Update 2006-008

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2006-008 applied. This update fixes a flaw in QuickTime that may allow a rogue website to obtain the images rendered on the user screen. By combining this flaw with Quartz Composer, an attacker may be able to...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4131

ArcSoft MMS Composer is affected by multiple buffer overflows in MMS parsers (M-Notification.ind, M-Retrieve.conf, and SMIL parsers) affecting versions 1.5.5.6 and 2.0.0.13 (and possibly earlier). This can allow remote attackers to crash the application or execute arbitrary code via crafted MMS m...

CVE-2006-4132

The CVE-2006-4132 entry affects ArcSoft MMS Composer versions 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier. The vulnerability enables remote impact via WAPPush messages sent to UDP port 2948, causing resource exhaustion and application crash (denial of service). The available s...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

Multiple ArcSoft MMS Composer for PocketPC security vulnerabilities

Multiple vulnerabilities with DoS and code execution impacts on MMS receiving...

PocketPC Mms Composer - 'WAPPush' Denial of Service

/ This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org http://www.mulliner.org/pocketpc/ NotfiFlood - a...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ========================================================= PocketPC MMS Composer WAPPush Denial of Service Exploit ========================================================= / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Compose...

ArcSoft Mms Composer 1.5.5/2.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/19451/info ArcSoft MMS Composer is affected by multiple vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits can allow remote attackers to cause denial-of-service conditions and to execute arbitrary machine code in...

ArcSoft Mms Composer 1.5.52.0 - Multiple Vulnerabilities

ArcSoft Mms Composer 1.5.52.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/19451/info ArcSoft MMS Composer is affected by multiple vulnerabilities, including buffer-overflow and denial-of-service issues. Successful exploits can allow remote attackers to cause...

PocketPC Mms Composer - WAPPush Denial of Service

PocketPC Mms Composer - WAPPush Denial of Service / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner http://www.trifinite.org...

PocketPC MMS Composer (WAPPush) Denial of Service Exploit

No description provided by source. / This is a Proof-of-Concept tool to demonstrate the PocketPC MMS Composer flood/crash vulnerability abusing the WAPPush port UDP:2948 This is for educational purposes only! Please use responsible! c Collin Mulliner [email protected] http://www.trifinite.org...

CVE-2005-2515

The CVE-2005-2515 entry concerns Quartz Composer Screen Saver in Mac OS X 10.4.2. Affected component: the Screen Saver subsystem (Quartz Composer Screen Saver). Root cause / vulnerability: local users can access links from the RSS Visualizer even when a password is required, enabling partial conf...

CVE-2005-2515

Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required...

CVE-2002-1766

Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute...

CVE-2002-1766

CVE-2002-1766 concerns Netscape 4.77's Composer component, where a buffer overflow can occur when processing a font tag with a long face attribute. This vulnerability could allow local users to overwrite process memory and execute arbitrary code. The provided documents identify the affected produ...

Quicktime < 7.0.1 Quartz Composer Information Disclosure (Mac OS X)

The remote Mac OS X host is running a version of Quicktime 7 which is older than Quicktime 7.0.1. The remote version of this software is vulnerable to an information disclosure flaw when handling Quartz Composer files which may leak data to an arbitrary web location. To exploit this flaw, an...