15330 matches found
Mozilla Firefox and SeaMonkey 'loadSubScript()' Security Bypass Vulnerability (MAC OS X)
The host is installed with Mozilla firefox/seamonkey and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsloadsubscriptsecbypassvulnmacosx.nasl 7052 2017-09-04 11:50:51Z teissa $ Mozilla Firefox and SeaMonkey 'loadSubScript' Security Bypass Vulnerability MA...
PT-2011-2207
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue is related to a buffer overflow in the ATSFontDeactivate API within Apple Type Services ATS in Apple Mac OS X. This allows remote attackers to potentially execute arbitrary code or...
PT-2011-2166
Name of the Vulnerable Software and Affected Versions Application Firewall in Apple Mac OS X versions prior to 10.7.2 Description A format string issue exists in the debug-logging feature of Application Firewall, allowing local users to elevate privileges through a specially crafted executable fi...
CVE-2011-3225: Undefined Security Weakness
The SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest users from accessing the share point record of a guest-restricted folder, which allows remote attackers to bypass intended browsing restrictions by leveraging access to the nobody account...
CVE-2011-3246: Exposure of Sensitive Information to an Unauthorized Actor
CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...
PT-2011-4316
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FLIC movie file. This is due to a buffer overflow in QuickTime. Recommendations For...
CVE-2011-3213: Undefined Security Weakness
The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate fo...
It's Time For an Apple Patch Tuesday
If there’s one thing that can be said about Apple, it’s that the company operates on its own timeline. It does what it pleases at whatever time suits it, and the customers appear. Actually, they don’t simply appear, they wait expectantly and move as one when asked. This has proven to be enormousl...
Mac OS X 10.7.x < 10.7.2 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.2. This version contains numerous security-related fixes for the following components : - Apache - Application Firewall - ATS - BIND - Certificate Trust Policy - CFNetwork - CoreMedia - CoreProcesses - CoreStorage - Fil...
Mac OS X 10.7 < 10.7.2 Multiple Vulnerabilities
Binary data 6039.prm...
Mac OS X Multiple Vulnerabilities (Security Update 2011-006)
The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2011-006 applied. This update contains numerous security-related fixes for the following components : - Apache - Application Firewall - ATS - BIND - Certificate Trust Policy - CFNetwork - CoreFoundation -...
Mac OS X : Apple Safari < 5.1.1
The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.1.1. Thus, it is potentially affected by numerous issues in the following components : - Safari - WebKit C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0; include"compat.inc"; if description scriptid56482;...
Google Fixes Seven Flaws in New Chrome 14 Release
Google has fixed seven security vulnerabilities in its Chrome browser with a new release on Tuesday. Six of the bugs fixed in Chrome are rated high, with just one listed as critical. The company paid out $10,000 in bounties for the bugs it fixed in this release. In addition to the security fixes,...
OpenSSH < 4.5 Multiple Vulnerabilities
According to its banner, the remote host is running a version of OpenSSH prior to 4.5. Versions before 4.5 are affected by the following vulnerabilities : - A client-side NULL pointer dereference, caused by a protocol error from a malicious server, which could cause the client to crash...
Firefox 3.6 < 3.6.23 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox 3.6 is earlier than 3.6.23. Such versions are potentially affected by the following security issues : - An integer underflow exists when handling a large JavaScript 'RegExp' expression that can allow a potentially exploitable crash. CVE-2011-2998 - If an attacker...
Firefox < 7.0 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...
Adobe Flash Player Multiple Vulnerabilities (Sep 2011) - Mac OS X
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Flash Player Multiple Vulnerabilities September-2011 (Mac OS X)
This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobeflashplayermultvulnmacosxsep11.nasl 7029 2017-08-31 11:51:40Z teissa $ Adobe Flash Player Multiple Vulnerabilities September-2011 Mac OS X Authors: Madhuri D...
Mac OS X < 10.6.7 Kernel Panic Exploit
No description provided by source. / Mac OS X 10.6.7 Kernel Panic Exploit CVE-2011-0182, Proof Of Concept Code Author - Chanam Park hkpco Date - 2011. 06 Contact - [email protected] , http://hkpco.kr , @hkpco Thanks for inspiration / x82, riaf. / // Compile: gcc -o CVE-2011-0182PoC...
Mac OS X Kernel Panic
/ Mac OS X include include include include include void dummyfunc void asm volatile ".byte 0xff" ; int main void int ret; union ldtentry cgate, cgate2; char dummy128 = 0x00,; cgate.callgate.offset00 = unsigned intdummyfunc & 0xffff; cgate.callgate.offset16 = unsigned intdummyfunc 16 & 0xffff; //...