Apple Mac OS X FileVault纯文本密码本地安全限制绕过漏洞

BUGTRAQ ID: 53402 Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 在使用"Legacy FileVault"时，FileVault中启用了调试开关，可导致将用户密码保存在纯文本的DEBUGLOG中，通过FireWire目标磁盘模式即可读取密码。成功利用需要OS X从较旧的版本升级并使用"Legacy FileVault"功能。 0 Apple MacOS X 10.7.3 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

MS12-029 / MS12-030: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2680352 / 2663830) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by the following vulnerabilities : - A memory corruption vulnerability could be triggered when parsing specially crafted RTF-formatted data. CVE-2012-0183 - Several memory corruption vulnerabilities could be...

Microsoft Office Word Remote Code Execution Vulnerability (2680352) - Mac OS X

This host is missing a critical security update according to Microsoft Bulletin MS12-029. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Remote Code Execution Vulnerabilities (2663830) - Mac OS X

This host is missing a critical security update according to Microsoft Bulletin MS12-030. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578) (Mac OS X)

The version of Microsoft Silverlight installed on the remote host is reportedly affected by several vulnerabilities : - Incorrect handling of TrueType font TTF files could lead to arbitrary code execution. CVE-2011-3402 / CVE-2012-0159 - A double-free condition leading to arbitrary code execution...

Microsoft Office Detection (Mac OS X SSH Login)

Detects the installed version of Microsoft Office. The script logs in via ssh, and searches for Microsoft Office SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Adobe Flash Player Object Confusion Remote Code Execution Vulnerability (Mac OS X)

This host is installed with Adobe Flash Player and is prone to object confusion remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayerobjcodeexecvulnmacosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Adobe Flash Player Object Confusion Remote Code Execution...

Adobe Flash Player Object Confusion Remote Code Execution Vulnerability - Mac OS X

Adobe Flash Player is prone to object confusion remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome Multiple Denial of Service Vulnerabilities (May 2012) - Mac OS X

Google Chrome is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Denial of Service Vulnerabilities - May 12 (Mac OS X)

The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmay12macosx.nasl 5940 2017-04-12 09:02:05Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - May 12 Mac OS X Authors:...

CVE-2012-0779

Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," ...

CVE-2012-0779

Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," ...

Design/Logic Flaw

Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," ...

CVE-2012-0779

Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," ...

CVE-2012-0779

Adobe Flash Player versions before 10.3.183.19 (Windows, Mac OS X, Linux), before 11.2.202.235 (Windows, Mac OS X, Linux), before 11.1.111.9 (Android 2.x/3.x), and before 11.1.115.8 (Android 4.x) are vulnerable to a remote code execution flaw. This object confusion vulnerability allows attackers ...

Wireshark BER Dissector Stack Consumption Vulnerability - Mac OS X

Wireshark is prone to stack consumption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Wireshark ZigBee ZCL Dissector Denial of Service Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark LDSS Dissector Buffer Overflow Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkldssdissectorbofvulnmacosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Wireshark LDSS Dissector Buffer Overflow Vulnerability Mac OS X Authors: Rachana Shetty Copyright:...

Wireshark ZigBee ZCL Dissector Denial of Service Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkzigbeezcldissectordosvulnmacosx.nasl 5958 2017-04-17 09:02:19Z teissa $ Wireshark ZigBee ZCL Dissector Denial of Service Vulnerability Mac OS X Authors: Rachana Shetty...

Wireshark BER Dissector Stack Consumption Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to stack consumption vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkberdissectorstackconsumptionvulnmacosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Wireshark BER Dissector Stack Consumption Vulnerability Mac OS X Authors: Rachana Shetty...