LibreOffice < 3.4.6 / 3.5.1 XML External Entity RDF Document Handling Information Disclosure (Mac OS X)

The remote host is running a version of LibreOffice 3.4.6 / 3.5.1 that has flaws in the way certain XML components are processed for external entities in ODF documents. These flaws can be utilized to access and inject the content of local files into an ODF document without a user's knowledge or...

CVE-2012-1906

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages...

Mozilla Firefox Bootstrapped Addon Social Engineering Code Execution

Mozilla Firefox Bootstrapped Addon Social Engineering Code Execution. Remote exploits for multiple platform This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and term...

Adobe Reader < 10.1.3 / 9.5.1 Multiple Vulnerabilities (APSB12-03, APSB12-05, APSB12-07, APSB12-08) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.3 or 9.5.1. It is, therefore, affected by the following vulnerabilities : - An integer overflow condition exists that allows an attacker to execute arbitrary code via a crafted True Type Font TFF. CVE-2012-0774 - A...

Ubuntu 10.04 LTS / 11.04 / 11.10 : puppet vulnerabilities (USN-1419-1)

It was discovered that Puppet used a predictable filename when downloading Mac OS X package files. A local attacker could exploit this to overwrite arbitrary files. CVE-2012-1906 It was discovered that Puppet incorrectly handled filebucket retrieval requests. A local attacker could exploit this t...

CVE-2012-0777

The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2012-0777

The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2012-0777

CVE-2012-0777 affects Adobe Reader/Acrobat on macOS and Linux: JavaScript API in Acrobat/Reader 9.x (before 9.5.1) and 10.x (before 10.1.3) allows remote attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Public advisories confirm this family of issues (CVE-20...

CVE-2012-0777

The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Mobile Terminal Application for Intermittent Connectivity: Mosh

Remote terminal application that allows roaming, supports intermittent connectivity, and provides intelligent local echo and line editing of user keystrokes. This is a replacement for SSH. It’s more robust and responsive, especially over Wi-Fi, cellular, and long-distance inks. Mosh is free...

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4373...

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-4372 and CVE-2011-4373...

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

Apple Mac OS X PNG文件MediaVideo处理缓冲区溢出漏洞

BUGTRAQ ID: 51814 CVE ID: CVE-2011-3460 Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Apple Mac OS X在为.png格式编码的视频解码分配空间时会触发特定的漏洞，计算surface的空间时，应用会信任MediaVideo标头中的比特位深。在解码过程中，应用会在surface的边界之外写入，在实现上存在缓冲区溢出漏洞，成功利用后可允许攻击者执行任意代码。受影响版本：Mac OS X 10.6.8 、Mac OS X Server 10.6.8、Mac OS X 10.7-10.7.2、Mac OS X Server...

Java Runtime Environment Multiple Vulnerabilities - Mac OS X

Java Runtime Environment is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Java Runtime Environment Multiple Vulnerabilities (MAC OS X)

The host is installed with Java Runtime Environment and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbjremultvulnmacosx.nasl 5977 2017-04-19 09:02:22Z teissa $ Java Runtime Environment Multiple Vulnerabilities MAC OS X Authors: Madhuri D Copyright: Copyright c 2012...

Researchers Confirm 600K-Strong Flashback Botnet Is Mostly Mac

Kaspersky Lab researchers say that analysis of the Flashfake botnet confirms the size of the malicious network and that it consists mostly of Mac OS X machines. Researchers at Kaspersky wrote on Friday that they were able to reverse engineer the domain generation algorithm used by the botnet, the...

Mac OS X OSX/Flashback Trojan Detection

Using the supplied credentials, Nessus has found evidence that the remote Mac OS X host has been compromised by a trojan in the OSX/Flashback family of trojans. The software is typically installed by means of a malicious Java applet or Flash Player installer. Depending on the variant, the trojan...

Java Runtime Environment (JRE) Detection (Mac OS X SSH Login)

Detects the installed version of Java. The script logs in via ssh, and gets the version via command line option SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Google Chrome Multiple Vulnerabilities - April 12 (MAC OS X)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnapr12macosx.nasl 5958 2017-04-17 09:02:19Z teissa $ Google Chrome Multiple Vulnerabilities - April 12 MAC OS X Authors: Madhuri D Copyright: Copyright c 2012...