195 matches found
CVE-2015-3691
The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer...
Null pointer dereference
The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer...
CVE-2015-3691
The CVE-2015-3691 issue affects Apple OS X 10.10.x: the Monitor Control Command Set kernel extension in Display Drivers allows a crafted app to take control of a function pointer and execute arbitrary code in a privileged context. The root cause is within that kernel extension’s handling of funct...
CVE-2015-3720
The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...
CVE-2015-3691
The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer...
CVE-2015-3720: Exposure of Sensitive Information to an Unauthorized Actor
The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...
Apple MAC OS X Monitor Control Command Set Kernel Extension Arbitrary Code Execution Vulnerability
Apple Mac OS X is a commercial operating system. A security vulnerability in Apple Mac OS X's handling of the Monitor Control Command Set kernel extension allows an attacker to run a malicious application to control function pointers in the kernel and execute arbitrary code...
Apple MAC OS X kextd Symbolic Link Arbitrary File Overwrite Vulnerability
Apple Mac OS X is a commercial operating system. Apple Mac OS X kextd suffers from a symbolic link vulnerability that allows attackers to run malicious applications and overwrite arbitrary files...
Apple TV < 7.0.3 Multiple Vulnerabilities
According to its banner, the remote Apple TV device is a version prior to 7.0.3. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist, related to the included version of WebKit, that allow application crashes or arbitrary code execution...
Apple TV and iOS API-related kernel extension information disclosure vulnerability
Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. An information disclosure vulnerability exists in the kernel extension relat...
Yosemite discovered a local privilege escalation vulnerability-vulnerability warning-the black bar safety net
Overview: following the previous research, we for Mac OS X the latest version of Yosemite 10.10.1 on IOBluetoothHCIController services were performed on more test results and found that in addition to 5 security vulnerabilities. We have the related issues submitted to the Apple Security, and, on...
CVE-2014-4380
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application...
Design/Logic Flaw
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application...
CVE-2014-4380
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application...
CVE-2014-4380
Concretely, CVE-2014-4380 is tied to IOHIDFamily in macOS (OS X Yosemite 10.10.x up to 10.10.2). The issue is a heap buffer overflow in IOHIDFamily's handling of key-mapping properties that could allow a local user to execute arbitrary code with system privileges. Mitigation in the connected doc ...
CVE-2014-4380: Improper Restriction of Operations within the Bounds of a Memory Buffer
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application...
AIX 5.3 TL 12 : syscall (IV22694)
A kernel extension call is exported to user space without proper sanity checks causing a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory syscalladvisory.asc. include'deprecatednasllevel.inc';...
AIX 7.1 TL 1 : syscall (IV22697)
A kernel extension call is exported to user space without proper sanity checks causing a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory syscalladvisory.asc. include'deprecatednasllevel.inc';...
AIX 6.1 TL 7 : syscall (IV22695)
A kernel extension call is exported to user space without proper sanity checks causing a system crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory syscalladvisory.asc. include'deprecatednasllevel.inc';...