126 matches found
Apple TV < 10.0.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in WebKit when handling the location attribute that allows an unauthenticated, remote attacker to bypass the cross-origin policies and...
macOS 10.12.x < 10.12.1 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is 10.12.x prior to macOS 10.12.1. It is, therefore, affected by multiple vulnerabilities in the following components : - ATS - AppleMobileFileIntegrity - AppleSMC - CFNetwork Proxies - CoreGraphics - FaceTime - FontParser - IDS - Connectivity...
About the security content of tvOS 10.0.1
About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of watchOS 3.1
About the security content of watchOS 3.1 This document describes the security content of watchOS 3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
macOS < 10.12 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...
Mac OS X < 10.11 Multiple Vulnerabilities
Binary data 8982.prm...
Apple iOS < 8.4.1 Multiple Vulnerabilities
Binary data 8978.prm...
CVE-2015-7760
libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service resource consumption by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761...
Design/Logic Flaw
libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service resource consumption by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761...
CVE-2015-7760
libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service resource consumption by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761...
CVE-2015-7760
CVE-2015-7760 affects Apple macOS X prior to 10.11. The vulnerability is in libxpc within launchd, which does not restrict process creation for network connections, enabling a remote attacker to cause a denial of service through repeated SSH connections. The description notes this is a distinct i...
PT-2015-2312
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to the libxpc component in launchd, which does not restrict the creation of processes for network connections. This allows remote attackers to cause a denial of service by...
CVE-2015-7760: Undefined Security Weakness
libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service resource consumption by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761...
iOS Mac OS X Code Execution System Failure
The vulnerability of the libxpc component in iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or trigger a service failure using XPC messages...
CVE-2015-3795
libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app that sends a malformed XPC message...
Memory corruption
libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app that sends a malformed XPC message...
CVE-2015-3795
libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app that sends a malformed XPC message...
CVE-2015-3795
CVE-2015-3795 affects libxpc in Apple iOS prior to 8.4.1 and OS X prior to 10.10.5. A memory corruption vulnerability in handling malformed XPC messages could allow a crafted app to execute arbitrary code in a privileged context or cause a denial of service. Remediation per provided details: upgr...
CVE-2015-3795: Improper Restriction of Operations within the Bounds of a Memory Buffer
libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app that sends a malformed XPC message...