15331 matches found
PT-2013-4758
Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.8.x Description The issue concerns the mach port space info function in the XNU kernel, which fails to initialize a certain structure member. This allows local users to obtain sensitive information from kernel heap...
CVE-2013-0983: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted text glyph in a URL encountered by Safari...
CVE-2013-0975: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image...
CVE-2013-3951: Improper Input Validation
sys/openbsd/stackprotector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings employed in the user-space stack-cookie implementation, which allows local users to bypass cookie randomization by executing a program with a call-path beginning with the...
CVE-2013-3949: Undefined Security Weakness
The posixspawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the POSIXSPAWNDISABLEASLR and POSIXSPAWNALLOWDATAEXEC flags for setuid and setgid programs, which allows local users to bypass intended access restrictions via a wrapper program that calls the...
CVE-2013-0985: Improper Authentication
Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to cause a denial of service loss of encryption functionality via an unspecified command line...
CVE-2013-0982: Exposure of Sensitive Information to an Unauthorized Actor
The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation...
CVE-2013-3952: Undefined Security Weakness
The fillpipeinfo function in bsd/kern/syspipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROCPIDFDPIPEINFO option to the procinfo system call for a kernel pipe handle...
CVE-2013-3953: Exposure of Sensitive Information to an Unauthorized Actor
The machportspaceinfo function in osfmk/ipc/machdebug.c in the XNU kernel in Apple Mac OS X 10.8.x does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted call...
Mac OSX Server DirectoryService Buffer Overflow
A memory corruption vulnerability was found in Mac OSX Directory Service. By sending a maliciously crafted message, a remote attacker could cause the directory server to terminate or execute arbitrary code with system privileges. The issue existed in the directory server's handling of messages fr...
Mac OS X : Apple Safari < 6.0.5 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...
Mac OS X 10.8.x < 10.8.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.4. The newer version contains multiple security-related fixes for the following components : - CFNetwork - CoreAnimation - CoreMedia Playback - CUPS - Disk Management - OpenSSL - QuickDraw Manager - QuickTime - SMB C...
Mac OS X Multiple Vulnerabilities (Security Update 2013-002)
The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2013-002 applied. This update contains numerous security-related fixes for the following components : - CoreMedia Playback 10.7 only - Directory Service 10.6 only - OpenSSL - QuickDraw Manager -...
Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)
Binary data 6857.prm...
Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)
Binary data 801016.prm...
Mac OSX Server DirectoryService buffer overflow
Advisory ID Internal CORE-2013-0103 1. Advisory Information Title: Mac OSX Server DirectoryService buffer overflow Advisory ID: CORE-2013-0103 Date published: 2013-06-04 Date of last update: 2013-06-04 Vendors contacted: Apple Release mode: Coordinated release 2. Vulnerability Information Class:...
CodeBlocks 12.11 (OSX) - Crash (PoC)
CodeBlocks 12.11 OSX - Crash PoC Exploit Title: CodeBlocks 12.11 Mac OS X Crash POC Date: 27-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.codeblocks.org Software Link: http://sourceforge.net/projects/codeblocks/files/Binaries/12.11/MacOS/codeblocks-12.11-mac.dmg Version: 12.11 Test...
CodeBlocks 12.11 (OSX) - Crash (PoC)
Exploit Title: CodeBlocks 12.11 Mac OS X Crash POC Date: 27-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.codeblocks.org Software Link: http://sourceforge.net/projects/codeblocks/files/Binaries/12.11/MacOS/codeblocks-12.11-mac.dmg Version: 12.11 Tested on: Mac OS X 10.7.5...
CodeBlocks 12.11 (Mac OS X) - Crash POC
Exploit for macOS platform in category dos / poc Exploit Title: CodeBlocks 12.11 Mac OS X Crash POC Date: 27-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.codeblocks.org Software Link: http://sourceforge.net/projects/codeblocks/files/Binaries/12.11/MacOS/codeblocks-12.11-mac.dmg...
Wireshark DCP ETSI Dissector DoS Vulnerability - June 13 (Mac OS X)
This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkdosvulnjun13macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Wireshark DCP ETSI Dissector DoS Vulnerability - June 13 Mac OS X Authors: Arun Kallavi Copyright: Copyright...