15329 matches found
Mac OS X : Apple Safari < 6.0.5 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...
CVE-2013-0975: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image...
CVE-2013-3952: Undefined Security Weakness
The fillpipeinfo function in bsd/kern/syspipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROCPIDFDPIPEINFO option to the procinfo system call for a kernel pipe handle...
CVE-2013-3949: Undefined Security Weakness
The posixspawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the POSIXSPAWNDISABLEASLR and POSIXSPAWNALLOWDATAEXEC flags for setuid and setgid programs, which allows local users to bypass intended access restrictions via a wrapper program that calls the...
CVE-2013-0984: Improper Restriction of Operations within the Bounds of a Memory Buffer
Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted message...
CVE-2013-0983: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted text glyph in a URL encountered by Safari...
CVE-2013-1024: Improper Input Validation
CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...
CVE-2013-0990: Undefined Security Weakness
SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors...
PT-2013-4759
Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.8.x Description The issue is related to the posix spawn system call in the XNU kernel, which does not properly validate data for file actions and port actions. This allows local users to cause a denial of service pani...
PT-2013-2777
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description The issue is related to the Disk Management in Apple Mac OS X, where it does not properly authenticate attempts to disable FileVault. This allows local users to cause a denial of service,...
PT-2013-2816
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description The issue is related to the CoreMedia Playback in Apple Mac OS X, where memory is not properly initialized during the processing of text tracks. This allows remote attackers to execute...
Mac OS X Multiple Vulnerabilities (Security Update 2013-002)
The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2013-002 applied. This update contains numerous security-related fixes for the following components : - CoreMedia Playback 10.7 only - Directory Service 10.6 only - OpenSSL - QuickDraw Manager -...
Mac OS X : Safari < 6.0.5 Multiple Security Vulnerabilities
Binary data 801014.prm...
Mac OSX Server DirectoryService buffer overflow
Advisory ID Internal CORE-2013-0103 1. Advisory Information Title: Mac OSX Server DirectoryService buffer overflow Advisory ID: CORE-2013-0103 Date published: 2013-06-04 Date of last update: 2013-06-04 Vendors contacted: Apple Release mode: Coordinated release 2. Vulnerability Information Class:...
CodeBlocks 12.11 (Mac OS X) - Crash POC
Exploit for macOS platform in category dos / poc Exploit Title: CodeBlocks 12.11 Mac OS X Crash POC Date: 27-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.codeblocks.org Software Link: http://sourceforge.net/projects/codeblocks/files/Binaries/12.11/MacOS/codeblocks-12.11-mac.dmg...
CodeBlocks 12.11 (OSX) - Crash (PoC)
CodeBlocks 12.11 OSX - Crash PoC Exploit Title: CodeBlocks 12.11 Mac OS X Crash POC Date: 27-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.codeblocks.org Software Link: http://sourceforge.net/projects/codeblocks/files/Binaries/12.11/MacOS/codeblocks-12.11-mac.dmg Version: 12.11 Test...
CodeBlocks 12.11 (OSX) - Crash (PoC)
Exploit Title: CodeBlocks 12.11 Mac OS X Crash POC Date: 27-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.codeblocks.org Software Link: http://sourceforge.net/projects/codeblocks/files/Binaries/12.11/MacOS/codeblocks-12.11-mac.dmg Version: 12.11 Tested on: Mac OS X 10.7.5...
Google Chrome Webkit Remote Code Execution Vulnerability (MAC OS X)
The host is installed with Google Chrome and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromewebkitremotecodeexecvulnmacosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Google Chrome Webkit Remote Code Execution Vulnerability MAC OS X Authors: Arun Kallav...
Wireshark Multiple DoS Vulnerabilities - June 13 (Mac OS X)
This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnjun13macosx.nasl 6125 2017-05-15 09:03:42Z teissa $ Wireshark Multiple DoS Vulnerabilities - June 13 Mac OS X Authors: Arun Kallavi Copyright:...
Wireshark ASN.1 BER Dissector DoS Vulnerability - May 13 (Mac OS X)
This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkdosvulnmay13macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Wireshark ASN.1 BER Dissector DoS Vulnerability - May 13 Mac OS X Authors: Arun Kallavi Copyright: Copyright...