Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures

The vulnerability of the libxpc component in iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or trigger a service failure using XPC messages...

Apple OS X DMG File Handling Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. Apple OS X suffers from a memory corruption vulnerability in the handling of special DMG files, which allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by an application and can be...

Apple OS X Text File External Reference Information Disclosure Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability exists in Apple OS X that allows remote attackers to exploit the vulnerability to construct malicious text files that can be parsed by an application, which can obtain sensitive user information...

Apple OS X Dictionary Application Query Monitor Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. Apple OS X has a security vulnerability that allows a remote user in a particular location on the network to spy on a target user's dictionary application queries...

Apple OS X NTFS Memory Error Arbitrary Code Execution Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. Apple OS X handles NTFS with a memory corruption vulnerability that allows local users to execute arbitrary code with system privileges...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05379)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X Quartz Composer Framework Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability in the Apple OS X Quartz Composer Framework's handling of QuickTime files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by an application, whic...

Apple OS X 'blued' buffer overflow vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A buffer overflow vulnerability exists in 'blued' when Apple OS X handles XPC messages, which allows a local user to exploit the vulnerability to execute arbitrary code...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05380)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X QuickTime Memory Corruption Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Apple OS X QuickTime memory corruption vulnerability (CNVD-2015-05377)

Apple OS X is a BSD-based operating system distributed by Apple. A memory corruption vulnerability exists in Apple OS X QuickTime Handling Special Files, which allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application or executing arbitra...

Adobe LiveCycle Data Services Hotfix

Adobe is today expected to push a hotfix through to implementations of its LiveCycle Data Services application framework. The company said the vulnerability, CVE-2015-3269, affects versions 4.7, 4.6.2, 4.5 and 3.0.x on Windows, Macintosh and UNIX systems. Adobe is not aware of public exploits of...

UBUNTU-CVE-2015-5552

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service memory corruption via...

UBUNTU-CVE-2015-5555

Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a...

UBUNTU-CVE-2015-5560

Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors...

UBUNTU-CVE-2015-5561

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vector...

flash-plugin: multiple code execution flaws (APSB15-19)

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vector...

Adobe Releases Security Updates for Flash Player

Adobe has released security updates to address multiple vulnerabilities in Flash Player for Windows, Macintosh, and Linux. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review Adobe...

Apple OS X DYLD_PRINT_TO_FILE Environment Variable Checksum Local ROOT Privilege Gain Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fails to properly calibrate the DYLDPRINTTOFILE environment variable, allowing local attackers to write arbitrary files with root privileges and elevated privileges...

APSB15-17 Security update available for Adobe Shockwave Player

Adobe has released a security update for Adobe Shockwave Player for Windows and Macintosh. This update addresses critical vulnerabilities that could potentially allow an attacker to take control of the affected system...