Apple Patches Two iOS Zero-Days Abused for Years

Update Researchers are reporting two Apple iOS zero-day security vulnerabilities affecting its Mail app on iPhones and iPads. Impacted are iOS 6 and iOS 13.4.1. Apple patched both vulnerabilities in iOS 13.4.5 beta, released last week. A final release of iOS 13.4.5 is expected soon. Both...

iOS Mail bug allows remote zero-click attacks

On Monday, ZecOps released a report about a couple concerning vulnerabilities with the Mail app in iOS. These vulnerabilities would allow an attacker to execute arbitrary code in the Mail app or the maild process that assists the Mail app behind the scenes. Most concerning, though, is the fact th...

New iPhone Zero-Day Discovered

Last year, ZecOps discovered two iPhone zero-day exploits. They will be patched in the next iOS release: Avraham declined to disclose many details about who the targets were, and did not say whether they lost any data as a result of the attacks, but said "we were a bit surprised about who was...

Zero-Day Warning: It's Possible to Hack iPhones Just by Sending Emails

Watch out Apple users! The default mailing app pre-installed on millions of iPhones and iPads has been found vulnerable to two critical flaws that attackers are exploiting in the wild, at least, from the last two years to spy on high-profile victims. The flaws could eventually let remote hackers...

VulnCheck KEV: CVE-2020-9818

Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message...

VulnCheck KEV: CVE-2020-9819

Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message...

[SECURITY] Fedora 31 Update: thunderbird-68.7.0-1.fc31

Mozilla Thunderbird is a standalone mail and newsgroup client...

CVE-2020-2878

CVE-2020-2878 affects Oracle E-Business Suite iSupport (Mail component), with affected versions 12.1.1–12.1.3. The connected Red Hat/Oracle/NVD and vuln enrichment entries confirm an unauthenticated, network-accessible vulnerability via HTTP in Oracle iSupport that can lead to unauthorized access...

MS15-131: Description of the security update for Word 2013: December 8, 2015

Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more...

Description of the Microsoft Office for Mac 2011 14.2.2 Update

Describes the Microsoft Office for Mac 2011 14.2.1 Update that was released on May 8, 2012INTRODUCTIONMicrosoft has released security bulletins MS12-029 and MS12-030. These security bulletins contain all the relevant information about the security updates for Microsoft Office for Mac 2011. To vie...

Denial Of Service (DoS)

cyrus-imapd is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially-crafted mail message to a victim that would possibly prevent them from accessing their mail...

Information Disclosure

squirrelmail is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the SquirrelMail Mail Fetch plug-in. If an administrator enabled this plug-in, a SquirrelMail user could use this flaw to port scan the local network the server was on...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. The vulnerability exists through as a HTML mail message containing malicious content could possibly lead to arbitrary code execution with the privileges of the user running Thunderbird...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to denial of service DoS. An arbitrary memory write flaw was found in the way Thunderbird handled out-of-memory conditions. If all memory was consumed when a user viewed a malicious HTML mail message, it could possibly lead to arbitrary code execution with the...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to Denial Of Service DoS. A flaw was found in the way Thunderbird displayed multiple marquee elements. A malformed HTML mail message could cause Thunderbird to execute arbitrary code with the privileges of the user running Thunderbird...

Arbitrary Code Execution

exim is vulnerable to arbitrary code execution. The vulnerability exists as a buffer overflow flaw was discovered in Exim's internal stringvformat function. A remote attacker could use this flaw to execute arbitrary code on the mail server running Exim...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. The vulnerability exists as an HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird...

Denial Of Service (DoS)

Mozilla Thunderbird is Denial of Service DoS. It is possible because it processes e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted...