APPLE-SA-2011-10-12-6 Numbers for iOS v1.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-6 Numbers for iOS v1.5 Numbers for iOS v1.5 is now available and addresses the following: Numbers Available for: iOS Impact: Opening a maliciously crafted Excel file may lead to an unexpected application termination or arbitrary co...

Apple iWork Numbers/Pages多个漏洞(CVE-2010-3786)

CVE ID: CVE-2010-3786 iWork 是以Mac 方式创建文档、电子表格和演示文稿的最轻松途径。 Apple iWork在实现上存在多个安全漏洞，远程攻击者可利用这些漏洞控制用户系统。 在处理Excel文件时，iWork Numbers中存在错误，可通过特制的文件造成内存破坏。 Apple iWork 9.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

Slackware 13.1 / current : mozilla-thunderbird (SSA:2010-202-02)

New mozilla-thunderbird packages are available for Slackware 13.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-202-02. The text itself is...

iDefense Security Advisory 11.11.10: Apple Mobile OfficeImport Framework Excel Parsing Memory Corruption Vulnerability

iDefense Security Advisory 11.11.10 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 11, 2010 I. BACKGROUND The OfficeImport framework is an API used by Apple's mobile devices, including the iPod Touch, iPhone, and iPad. The framework is used to parse and display Microsoft Office file...

CVE-2010-3786

QuickLook in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Excel file...

CVE-2010-3786

CVE-2010-3786 affects Apple Mac OS X QuickLook in 10.6.x prior to 10.6.5, where a crafted Excel file can cause memory corruption leading to remote code execution or a denial of service. Public sources also tie related Excel-handling memory corruption to iWork Numbers, and Apple released mitigatio...