CVE-2014-1255

Apple Type Services ATS in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

CVE-2014-1262

CVE-2014-1262 affects Apple OS X: the Type Services (ATS) component in Mavericks (10.9/10.9.1) has a memory corruption flaw in the handling of Mach messages that can bypass the App Sandbox. The issue was addressed by Apple in Security Update 2014-001 (OS X 10.9.2 and beyond). Connected sources co...

CVE-2014-1256

Apple OS X ATS memory corruption issue tracked as CVE-2014-1256: a buffer/ memory corruption in Apple Type Services that could allow bypassing App Sandbox via crafted Mach messages. Affects OS X versions up to 10.9.2 (including Mavericks prior to 10.9.2). Root cause: bounds checking/memory handli...

CVE-2014-1256

Buffer overflow in Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

CVE-2014-1262

Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption...

Sandbox Escape: OSX ATS arbitrary free issue may lead to App Sandbox bypass

This issue was reported directly to Apple and has been resolved in OSX Security Update 2014-001. http://support.apple.com/kb/HT6150 Available for: OS X Mavericks 10.9 and 10.9.1 Impact: The App Sandbox may be bypassed Description: An arbitrary free issue existed in the handling of Mach messages...

CVE-2013-5175

The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service out-of-bounds read and system crash via a crafted Mach-O file...

Out-of-bounds

The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service out-of-bounds read and system crash via a crafted Mach-O file...

CVE-2013-5175

The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service out-of-bounds read and system crash via a crafted Mach-O file...

CVE-2013-5175

The CVE-2013-5175 issue affects the Apple Mac OS X kernel prior to 10.9. A crafted Mach-O file allows local users to perform an out-of-bounds read that can reveal sensitive information or cause a system crash (DoS). Impact is limited to local privilege context and does not specify remote/exploit ...

APPLE-SA-2013-03-19-1 iOS 6.1.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-03-19-1 iOS 6.1.3 iOS 6.1.3 is now available and addresses the following: dyld Available for: iPhone 3GS and later, iPod touch 4th generation and later, iPad 2 and later Impact: A local user may be able to execute unsigned code...

APPLE-SA-2013-03-19-2 Apple TV 5.2.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-03-19-2 Apple TV 5.2.1 Apple TV 5.2.1 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: A local user may be able to execute unsigned code Description: A state management issue...

CVE-2013-0977

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments...

Design/Logic Flaw

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments...

CVE-2013-0977

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments...

Apple iOS < 6.1.3 Multiple Vulnerabilities

Binary data 6718.prm...

Apple iOS < 6.1.3 Multiple Vulnerabilities

Binary data appleios613check.nbin...

SA-CONTRIB-2011-055 - Webform CiviCRM Integration - Multiple vulnerabilities

The Webform CiviCRM Integration module extends the functionality of the Webform Module to link form submissions with a CiviCRM database. Version 2.0 of the module added form validation based on CiviCRM data type. A flaw in the implementation of this feature caused other validation handlers to fai...

CVE-2011-1053

Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service out-of-memory exception and inability to analyze code via a crafted Mach-O file...

CVE-2011-1049

Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Macho-O file...