Heap overflow

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages...

CVE-2014-1358

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1357

CVE-2014-1357: Heap overflow in launchd when handling log messages enables arbitrary code execution with system privileges on iOS <7.1.2, OS X <10.9.4, and Apple TV

CVE-2014-1358

CVE-2014-1358 concerns a heap/overflow condition in the Apple launchd component. The issue is described as an integer overflow in launchd’s handling of IPC messages, which could allow a crafted application to execute arbitrary code with system privileges. Affected products include iOS before 7.1....

CVE-2014-1359

CVE-2014-1359 affects Apple iOS < 7.1.2, OS X < 10.9.4, and Apple TV

Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jum...

CVE-2014-1356: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages...

CVE-2014-1358: Undefined Security Weakness

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1357: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that generates log messages...

CVE-2014-1359: Undefined Security Weakness

Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the...

Mac OS X 10.9.x < 10.9.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.4. This update contains several security-related fixes for the following components : - Certificate Trust Policy - copyfile - curl - Dock - Graphics Driver - iBooks Commerce - Intel Graphics Driver - Intel Compute -...

CVE-2008-7303

The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...

CVE-2011-1516: Undefined Security Weakness

The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Appl...

CVE-2008-7303: Undefined Security Weakness

The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...

Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. One or more of the following components are affected: bzip2 CFNetwork ColorSync CoreTypes Dock Image RAW ImageIO Kernel launchd Login Window MobileMe Networking XQuery OpenVAS Vulnerability Test Mac OS X 10.5.8...

Mac OS X Security Update 2008-007

The remote host is missing Security Update 2008-007. One or more of the following components are affected: Apache Certificates ClamAV ColorSync CUPS Finder launchd libxslt MySQL Server Networking PHP Postfix PSNormalizer QuickLook rlogin Script Editor Single Sign-On Tomcat vim Weblog OpenVAS...

Code injection

launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service individual service outage by making many connections to an inetd-based launchd service...

CVE-2009-2190

launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service individual service outage by making many connections to an inetd-based launchd service...

CVE-2009-2190

launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service individual service outage by making many connections to an inetd-based launchd service...