Apple Mac OS X PDF文件缓冲区溢出漏洞(CVE-2013-1025)

BUGTRAQ ID: 62368 CVECAN ID: CVE-2013-1025 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4在处理PDF文件内JBIG2编码的数据时存在缓冲区溢出漏洞，远程攻击者通过特制的PDF文件，利用此漏洞可造成应用终止或执行任意代码。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁: HT5880：About the security content of OS ...

PT-2013-2817

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, specifically an application crash, by providing crafted JBIG2 data in a PDF document. This is due to ...

PT-2013-2820

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.8.5 Description The issue concerns the IPSec implementation when Hybrid Auth is used, where it fails to verify X.509 certificates from security gateways. This allows attackers to spoof security gateways and obtain...

Apple Mac OS X 'IPSec Hybrid Auth' 服务器证书安全绕过漏洞(CVE-2013-1028)

BUGTRAQ ID: 62371 CVECAN ID: CVE-2013-1028 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4存在安全漏洞，攻击者可以截获IPSec Hybrid Auth所保护的数据。IPSec Hybrid Auth服务器的DNS名称没有匹配证书，可使具有任何服务器证书的攻击者利用此漏洞模拟其他服务器。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁:...

PT-2013-2818

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, specifically an application crash, by providing crafted JPEG2000 data in a PDF document. This is due ...

PT-2013-2822

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue allows local users to obtain sensitive information by listing the process, due to the mdmclient in Mobile Device Management placing a password on the command line. Recommendations F...

Mac OS X 10.8 < 10.8.5 Multiple Vulnerabilities (Security Update 2013-004)

Binary data 8008.prm...

Apple MAC OS X ImageIO 缓冲区溢出漏洞(CVE-2013-1026)

BUGTRAQ ID: 62369 CVECAN ID: CVE-2013-1026 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4在处理PDF文件内JPEG2000编码的数据时存在缓冲区溢出漏洞，远程攻击者通过特制的PDF文件，利用此漏洞可造成应用终止或执行任意代码。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁: HT5880：About the security content of ...

PT-2013-2821

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue allows remote attackers to cause a denial of service, resulting in a system panic, by sending crafted IGMP packets. This is due to incorrect, extraneous code in the IGMP parser...

CVE-2013-1026: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JPEG2000 data in a PDF document...

CVE-2013-1028: Improper Input Validation

The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate...

CVE-2013-1031: Undefined Security Weakness

Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had prevented the startup o...

CVE-2013-1033: Undefined Security Weakness

Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access...

CVE-2013-1032: Out-of-bounds Write

QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted idsc atom in a QuickTime movie file...

CVE-2013-1029: Improper Input Validation

The kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service panic via crafted IGMP packets that leverage incorrect, extraneous code in the IGMP parser...

PT-2013-2819

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue allows user-assisted remote attackers to potentially execute arbitrary code via a crafted package. This is possible because the installer provides an option to continue a package's...

PT-2013-2824

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted idsc atom in a QuickTime movie...

CVE-2013-1027: Undefined Security Weakness

Installer in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation after encountering a revoked certificate, which might allow user-assisted remote attackers to execute arbitrary code via a crafted package...

PT-2013-2825

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue is related to the Screen Lock feature in Apple Mac OS X, which does not properly track sessions. This allows remote authenticated users to bypass the lock by leveraging screen-shari...

CVE-2013-1025: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JBIG2 data in a PDF document...