1098 matches found
The vulnerability of the Mac OS X operating system, which allows a hacker to modify the microprogramming software
The vulnerability of the EFI component in the Mac OS X operating system is related to errors in the code. Exploiting this vulnerability allows an intruder to modify the microprogramming software using a third-party storage device connected to the Thunderbolt interface...
Mac OS X < 10.10.4 Multiple Vulnerabilities
Binary data 8801.prm...
CVE-2015-5914
The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists because of an incomplete...
CVE-2015-5900
The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service boot failure via a crafted app that writes to an unintended address...
Design/Logic Flaw
The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service boot failure via a crafted app that writes to an unintended address...
Code injection
The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists because of an incomplete...
CVE-2015-5914
CVE-2015-5914 affects the EFI component in Apple OS X prior to 10.11. The issue enables physically proximate attackers to modify firmware during EFI updates by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM (Thunderstrike). Root cause is an incomplete fix for C...
CVE-2015-5914
The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists because of an incomplete...
CVE-2015-5900
CVE-2015-5900: Affects Apple OS X EFI component; an incorrect value in the protected range register allows a crafted app to write to an unintended address, causing a denial of service via boot failure. Root cause: EFI protected range misconfig. Impact: boot process disruption. Remediation/fix det...
Oracle: Security Advisory (ELSA-2013-1645)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 21 : xen-4.4.2-9.fc21 (2015-12714)
QEMU heap overflow flaw while processing certain ATAPI commands. XSA-138, CVE-2015-5154 1247142 rebuild efi grub.cfg if it is present 1239309, add gcc5 build fixes, one needed for the following patch, modify gnutls use in line with Fedora's crypto policies 117935 Note that Tenable Network Securit...
Fedora 22 : xen-4.5.1-5.fc22 (2015-12657)
QEMU heap overflow flaw while processing certain ATAPI commands. XSA-138, CVE-2015-5154 1247142 try again to fix xen-qemu-dom0-disk-backend.service 1242246 correct qemu location in xen-qemu-dom0-disk-backend.service 1242246, rebuild efi grub.cfg if it is present 1239309, re-enable remus by buildi...
Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection
If you think Apple’s Mac computers are much more secure than Windows-powered systems, you need to think again. This isn’t true, and security researchers have finally proved it. Two security researchers have developed a proof-of-concept computer worm for the first time that can spread automaticall...
CVE-2015-2890
The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...
Code injection
The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...
CVE-2015-2890
The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions CS devices with model-dependent firmware before A21 does not enforce a BIOSCNTL locking protection mechanism upon being woken from sleep, which allows local users to conduc...
CVE-2015-2890
CVE-2015-2890 affects Dell Latitude, OptiPlex, Precision Mobile Workstation and Precision Workstation CS devices with model-dependent firmware before A21. The root cause is failure to enforce BIOS_CNTL locking protection when resuming from sleep, allowing a local attacker with console access to p...
Mac OS X Multiple EFI Vulnerabilities (EFI Security Update 2015-001)
The remote Mac OS X host is running EFI firmware that is affected by multiple vulnerabilities : - An insufficient locking issue exists, when resuming from sleep states, which allows a local attacker to write to the EFI flash memory by using an crafted application with root privileges. CVE-2015-36...
APPLE-SA-2015-06-30-3 Mac EFI Security Update 2015-001
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-3 Mac EFI Security Update 2015-001 Mac EFI Security Update 2015-001 is now available and addresses the following: EFI Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5 Impact: A malicious application with root...