CVE-2012-3726

Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...

CVE-2012-3726

CVE-2012-3726 is a double-free vulnerability in ImageIO’s JPEG handling on iOS prior to iOS 6. The flaw could allow remote code execution or a denial of service via a crafted JPEG image. Public documents underlined in Apple advisories indicate the issue was addressed in the iOS 6 update; no expli...

Mac OS X Multiple Vulnerabilities (Security Update 2012-004) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-004 applied. This update contains multiple security-related fixes for the following components : - Apache - Data Security - DirectoryService - ImageIO - International Components for Unicode - Mail - PHP ...

Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components : - Apache - BIND - CoreText - Data Security - ImageIO - Installer - International Components for Unicode - Kernel - Mail - PHP ...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...

Mac OS X Multiple Vulnerabilities (Security Update 2012-002) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-002 applied. This update contains multiple security-related fixes for the following components : - curl - Directory Service - ImageIO - libarchive - libsecurity - libxml - Quartz Composer - QuickTime -...

Mac OS X 10.7.x < 10.7.3 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.3. The newer version contains multiple security-related fixes for the following components : - Address Book - Apache - ATS - CFNetwork - CoreMedia - CoreText - CoreUI - curl - Data Security - dovecot - filecmds - ImageI...

NGS00062 Technical Advisory: Apple OSX / iPhone ImageIO TIFF getBandProcTIFF TileWidth Heap Overflow

======= Summary ======= Name: Apple OSX / iPhone iOS ImageIO TIFF getBandProcTIFF TileWidth Heap Overflow Reference: NGS00062 Discoverer: Dominic Chell [email protected] Vendor: Apple Vendor Reference: 145575681 Systems Affected: Apple OSX / iPhone iOS / Possibly others using LibTiff...

Apple OSX / iPhone ImageIO TIFF getBandProcTIFF TileWidth堆溢出漏洞

Apple iOS是运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple OS X / iPhone iOS在处理getBandProcTiff中的超大tilewidth图形标签时存在堆溢出漏洞，远程攻击者可利用此漏洞造成memcpy中的溢出，从而控制受影响系统。 tilewidth图形标签值的范围是从8BEE到8BF1，设置为00800000 8388608可造成崩溃。 Apple iOS 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

Apple iTunes < 10.5 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.5. Thus, it is reportedly affected by numerous issues in the following components : - CoreFoundation - ColorSync - CoreAudio - CoreMedia - ImageIO - WebKit C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0;...

Apple iTunes < 10.5 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 10.5. It is, therefore, affected by multiple vulnerabilities in the CoreAudio, CoreFoundation, CoreMedia, ColorSync, ImageIO, and WebKit components. Note that these only affect iTunes for Windows. C Tenable Network Security, Inc. ...

Apple iOS < 7.0 Multiple Vulnerabilities

Binary data 8013.prm...

Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007)

This host is missing an important security update according to Mac OS X 10.6.5 Update/Mac OS X Security Update 2010-007 OpenVAS Vulnerability Test $Id: gbmacosxsu10-007.nasl 7052 2017-09-04 11:50:51Z teissa $ Mac OS X v10.6.4 Multiple Vulnerabilities 2010-007 Authors: Madhuri D Copyright: Copyrig...

Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)

This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-001.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.6 Multiple Vulnerabilities 2011-001 Authors: Antu Sanadi Copyright:...

Mac OS X v10.6.8 Multiple Vulnerabilities (2011-004)

This host is missing an important security update according to Mac OS X 10.5.8 Update/Mac OS X Security Update 2011-004. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-004.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.8 Multiple Vulnerabilities 2011-004 Authors: Antu Sanadi Copyright:...

CVE-2011-0241

Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with CCITT Group 4 encoding...

CVE-2011-0215

ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF file...

Heap overflow

Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with CCITT Group 4 encoding...

Code injection

ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF file...

CVE-2011-0215

CVE-2011-0215 affects ImageIO in Apple Safari on Windows, where a re-entrancy issue in TIFF handling could be exploited to execute arbitrary code or cause an application crash. The vulnerability stems from ImageIO’s TIFF processing and was publicly described in the Apple advisory chain associated...