15330 matches found
Apple Safari libxslt File Create
Added: 10/24/2011 CVE: CVE-2011-1774 BID: 48840 OSVDB: 74017 Background Safari is a web browser for Mac OS X and Windows. Problem Safari versions prior to 5.0.6 use unsafe security settings when implementing libxslt. An attacker may leverage this weakness by creating a web page that references a...
Apple Mac OS X 'i386_set_ldt()' Privilege Escalation Vulnerability
This host is installed with Mac OS X and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbmacosxi386setldtprvescvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Apple Mac OS X 'i386setldt' Privilege Escalation Vulnerability Authors: Sooraj KS Copyright: Copyright c 20...
Apple MAC OS X v10.6.8 Safari Multiple Vulnerabilities
This host is installed with Safari and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsafarimultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Apple MAC OS X v10.6.8 Safari Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH...
Mac OS X XProtect Installed
There is a problem with the installation of the Apple XProtect application on the remote Mac OS X host - either updates are not enabled / running or its definitions are out of date. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56568; scriptversion"1.57";...
Mac OS X XProtect Detection
The remote Mac OS X host includes XProtect, an antivirus / anti- malware application from Apple included with recent releases of Snow Leopard 10.6 and later. It is used to scan files that have been downloaded from the Internet by browsers and other tools. Note that this plugin only gathers...
Apple Mac OS X 'i386_set_ldt()' Privilege Escalation Vulnerability
Mac OS X is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Thunderbird Installed (Mac OS X)
Mozilla Thunderbird is installed on the remote Mac OS X host. TRUSTED...
Google Chrome multiple vulnerabilities - October11 (Mac OS X)
The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnoct11macosx.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome multiple vulnerabilities - October11 Mac OS X Authors: Sooraj KS Copyright: Copyright c 2011...
Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
Description Oracle Java SE is prone to a remote code-execution vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'Scripting' sub-component. This vulnerability affects the following supported versions: JDK and JRE 7, 6...
Google Chrome Multiple Vulnerabilities (Oct 2011) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Safari safari-extension:// URL处理遍历远程代码执行漏洞
CVE ID: CVE-2011-3229 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari在处理safari-extension:// URL时存在目录遍历问题，浏览恶意网站可导致执行任意Javascript代码。 Apple Mac OS X 10.6.8 Apple Mac OS X Server v10.6.8 Microsoft Vista Microsoft Windows 7 Apple OS X Lion 10.7.2 Apple OS X Lion Server 10.7.2 厂商补丁：...
Apple Safari file:// URL远程代码执行漏洞
CVE ID: CVE-2011-3230 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari在处理file:// URL时存在策略问题，浏览恶意网站可导致任意代码执行。此漏洞不影响Windows系统。 Apple Mac OS X 10.6.8 Apple Mac OS X Server v10.6.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...
Apple Safari WebKit Private Browsing模式Cookie限制绕过漏洞
CVE ID: CVE-2011-3242 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari在Private Browsing模式中处理cookie时存在逻辑错误，即使"Block cookies"设置为“Always”也会设置cookie。 Apple Mac OS X 10.6.8 Apple Mac OS X Server v10.6.8 Apple OS X Lion 10.7.2 Apple OS X Lion Server 10.7.2 厂商补丁： Apple -----...
Apple Safari SSL证书处理未初始化内存访问远程代码执行漏洞
CVE ID: CVE-2011-3231 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari在处理SSL证书时存在未初始化内存访问漏洞，浏览恶意网站可导致任意代码执行。此漏洞不影响OS X Lion系统或Windows系统。 Apple Mac OS X 10.6.8 Apple Mac OS X Server v10.6.8 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...
APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006 OS X Lion v10.7.2 and Security Update 2011-006 is now available and addresses the following: Apache Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7 and...
APPLE-SA-2011-10-12-4 Safari 5.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...
Apple Safari Directory Traversal
CVE: CVE-2011-3229 Found by: Aaron Sigel of vtty.com Summary: Safari is vulnerable to a directory traversal issue with the handling of "safari-extension://" URLs. Attackers can create malicious websites that trigger Safari to send files from the victim's system to the attacker. Arbitrary Javascri...
CVE-2011-3435
Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors...
CVE-2011-3436
Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation...