CVE-2015-7760

libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service resource consumption by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761...

Design/Logic Flaw

libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service resource consumption by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761...

CVE-2015-7760

CVE-2015-7760 affects Apple macOS X prior to 10.11. The vulnerability is in libxpc within launchd, which does not restrict process creation for network connections, enabling a remote attacker to cause a denial of service through repeated SSH connections. The description notes this is a distinct i...

CVE-2015-7760

libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service resource consumption by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761...

Apple OS X SSH Link Denial of Service Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X launchd fails to properly limit the number of processes, allowing attackers to exploit a vulnerability to submit multiple SSH links for denial of service attacks...

APPLE-SA-2014-06-30-3 iOS 7.1.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-3 iOS 7.1.2 iOS 7.1.2 is now available and addresses the following: Certificate Trust Policy Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: Update to the certificate trust policy...

Mac OS X and iPhone sandbox escapes

Posted by Chris Evans, Finder of None Of These As part of our launch manifesto, we committed to openness and transparency, including sharing full details of our research. About a month ago, Apple released two security advisories which fixed some Project Zero findings. Today, we’re releasing the...

July 2014 Apple security patches

Apple has issued a slew of security updates addressing a wide swath of vulnerabilities in its Safari Web browser, Mavericks desktop operating system, iOS mobile platform and content streaming AppleTV product. Apple doesn’t rate the severity of the vulnerabilities it fixes nor does it advise on...

CVE-2014-1358

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

Integer overflow

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

Integer overflow

Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

Heap overflow

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages...

CVE-2014-1358

CVE-2014-1358 concerns a heap/overflow condition in the Apple launchd component. The issue is described as an integer overflow in launchd’s handling of IPC messages, which could allow a crafted application to execute arbitrary code with system privileges. Affected products include iOS before 7.1....

CVE-2014-1357

CVE-2014-1357: Heap overflow in launchd when handling log messages enables arbitrary code execution with system privileges on iOS <7.1.2, OS X <10.9.4, and Apple TV

CVE-2014-1358

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1359

CVE-2014-1359 affects Apple iOS < 7.1.2, OS X < 10.9.4, and Apple TV

Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jum...

Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the...

Mac OS X 10.9.x < 10.9.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.4. This update contains several security-related fixes for the following components : - Certificate Trust Policy - copyfile - curl - Dock - Graphics Driver - iBooks Commerce - Intel Graphics Driver - Intel Compute -...

CVE-2008-7303

The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...