Thunderbird ESR < 17.0.11 Null_Cipher Code Execution (Mac OS X)

The installed version of Thunderbird ESR is prior to 17.0.11 and is, therefore, potentially affected by a code execution vulnerability related to the function 'NullCipher' in the file 'ssl/ssl3con.c' and handling handshake packets. C Tenable Network Security, Inc. include"compat.inc"; if...

BlackBerry Link Multiple Vulnerabilities

The remote host has a version of BlackBerry Link installed that is prior to version 1.2.1.31. Such versions are affected by multiple vulnerabilities : - A WebDAV server that listens on an IPv6 address allows remote access to the host's file system. It may also be possible to utilize this...

Java based Cross platform malware targeting Apache Tomcat servers in the wild

Takashi Katsuki, a researcher at Antivirus firm Symantec has discovered a new cyber attack ongoing in the wild, targeting an open-source Web server application server Apache Tomcat with a cross platform Java based backdoor that can be used to attack other machines. The malware, dubbed as...

Adobe AIR RCE / DoS Vulnerabilities (Nov 2013) - Mac OS X

Adobe AIR is prone to remote code execution RCE and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Adobe Flash Player Code Execution and DoS Vulnerabilities (Nov 2013) - Mac OS X

Adobe Flash Player is prone to remote code execution RCE and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Google Chrome Multiple Vulnerabilities (Nov 2013) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2013-3694

BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests, as demonstrated by a CSRF attack involving DNS rebinding...

CVE-2013-6799

Apple Mac OS X 10.9 allows local users to cause a denial of service memory corruption or panic by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105...

Memory corruption

Apple Mac OS X 10.9 allows local users to cause a denial of service memory corruption or panic by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105...

Firefox ESR 24.x < 24.1.1 NSS and NSPR Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox ESR 24.x is a version prior to 24.1.1 and is, therefore, potentially affected by the following vulnerabilities : - An error exists related to handling input greater than half the maximum size of the 'PRUint32' value. CVE-2013-1741 - An error exists in the...

Firefox ESR < 17.0.11 Null_Cipher Code Execution (Mac OS X)

The installed version of Firefox ESR is a version prior to 17.0.11 and is, therefore, potentially affected by a code execution vulnerability related to the function 'NullCipher' in the file 'ssl/ssl3con.c' and handling handshake packets. C Tenable Network Security, Inc. include"compat.inc"; if...

Apple Mac OS X and QuickTime multiple security vulnerabilities

Multiple vulnerabilities in kernel, networking components, printing services, AFP Server, AppKit, Apple Type Services, CFNetwork, CoreGraphics, CoreText, Directory Services, diskdevcmds, Disk Images, Image Capture, ImageIO, Image RAW, Password Server, QuickLook, QuickTime, Safari RSS, Time Machin...

Firefox < 25.0.1 NSS and NSPR Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is a version prior to 25.0.1 and is, therefore, potentially affected by the following vulnerabilities : - An error exists related to handling input greater than half the maximum size of the 'PRUint32' value. CVE-2013-1741 - An error exists in the 'NullCipher'...

CVE-2013-6799

CVE-2013-6799 affects macOS/HFS+ where the OS allowed creating hard links to directories due to an incomplete fix for CVE-2010-0105. Local attackers can trigger memory corruption or a denial of service by crafting hard links to directories (DoS/panic scenarios described in PoC). Affected: macOS/m...

CVE-2013-6799

Apple Mac OS X 10.9 allows local users to cause a denial of service memory corruption or panic by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105...

PT-2013-6116

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.9 Description The issue allows local users to cause a denial of service, resulting in memory corruption or panic, by creating a hard link to a directory. This problem exists due to an incomplete fix for a previous...

PT-2013-6115

Name of the Vulnerable Software and Affected Versions BlackBerry Link versions prior to 1.2.1.31 on Windows BlackBerry Link versions prior to 1.1.1 build 39 on Mac OS X Description The issue allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6...

CVE-2013-6798: Undefined Security Weakness

BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended...

CVE-2013-6799: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple Mac OS X 10.9 allows local users to cause a denial of service memory corruption or panic by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105...

Google Chrome < 31.0.1650.57 Multiple Memory Corruptions (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 31.0.1650.57. It is, therefore, affected by multiple unspecified memory corruption vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70924; scriptversion"1.6";...