Apple Mac OS X Multiple Vulnerabilities-01 (Sep 2016)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HackerOne: HackerOne Integrations Design Issue

Summary HackerOne Integrations Design Issue Description Include Impact This bug is similar to 170552. The HackerOne Integrations feature is very sensitive and can not be used with just a click, IMHO, or we can say "HackerOne users are a click away from​ giving to an attacker very sensitive...

Apple OS X ATS Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Apple Type Service ATS is one of the font type services. A memory corruption vulnerability exists in ATS in Apple OS X versions prior to 10.12. A remote attacker can exploit this vulnerability to execute arbitrary...

One Click Symbolic Execution: Ponce

Ponce pronounced ‘poN θe pon-they is an IDA Pro plugin that provides users the ability to perform taint analysis and symbolic execution over binaries in an easy and intuitive fashion. With Ponce you are one click away from getting all the power from cutting edge symbolic execution. Entirely writt...

CVE-2016-4709

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710...

CVE-2016-4699

AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-4700...

PT-2016-2790

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.12 Description The issue is related to errors in security settings of the Perl component in Mac OS X, allowing a local attacker to bypass the Taint-mode protection mechanism using a specially crafted environment...

Mozilla Firefox ESR Security Advisories (MFSA2016-85, MFSA2016-86) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Advisories (MFSA2016-85, MFSA2016-86) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

SSH-Weak-DH - SSH Weak Diffie-Hellman Group Identification Tool

This tool establishes SSH connections to a server, thereby enumerating through various client configurations, in order to determine whether the server allows a Diffie-Hellman DH key exchange based on a weak group. We hope that our tool will be useful to check SSH servers for weak DH key exchange...

Mozilla Firefox < 49.0 Multiple Vulnerabilities (Mac OS X)

The version of Mozilla Firefox installed on the remote Mac OS X host is prior to 49.0. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists within file dom/security/nsCSPParser.cpp when handling content security policies CSP containing empty referrer...

Mozilla Firefox ESR 45.x < 45.4 Multiple Vulnerabilities (Mac OS X)

The version of Mozilla Firefox ESR installed on the remote Mac OS X host is 45.x prior to 45.4. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the HttpBaseChannel::GetPerformance function in netwerk/protocol/http/HttpBaseChannel.cpp due to the program leaking...

Microsoft Silverlight Remote Code Execution Vulnerability (3182373) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS16-109. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Mac OS X : Apple Safari < 9.1.3 WebKit Memory Corruption RCE

The version of Apple Safari installed on the remote Mac OS X host is prior to 9.1.3. It is, therefore, affected by a remote code execution vulnerability in WebKit due to a memory corruption issue. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a malicious...

Mac OS X iOS Privilege Escalation

The vulnerability of the kernel in Mac OS X and iOS arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption using undefined vectors...

Mac OS X Confidential Information Privilege Escalation

The vulnerability of the CoreGraphics component in the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, acting locally, to obtain confidential information from the kernel’s memory, enhance their privileges, or cause a...

Mac OS X Privilege Escalation

The vulnerability of the Audio component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption using a specially crafted file...

Mac OS X Information Disclosure

The vulnerability of the CFNetwork component in the Mac OS X operating system is related to the use of weak permissions for cookie files in web browsers. Exploiting this vulnerability could allow an intruder, operating locally, to obtain confidential information using indefinite vectors...

Mac OS X DoS Confidential Information

The vulnerability of the Audio component in the Mac OS X operating system is related to errors in calculating the size of audio data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information or cause a service failure memory overflow by using a specially create...

Mac OS X DoS

The vulnerability of the Audio component in the Mac OS X operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker, operating locally, to trigger a service failure pointer swapping of the zero pointer using uncertain vectors...