551 matches found
Design/Logic Flaw
The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app...
Design/Logic Flaw
The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...
CVE-2015-3690
The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...
Design/Logic Flaw
The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...
Design/Logic Flaw
The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...
Design/Logic Flaw
AppleGraphicsControl in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information via a crafted app...
CVE-2015-3676
AppleGraphicsControl in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information via a crafted app...
CVE-2015-3690
The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...
CVE-2015-3711
The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...
CVE-2015-3677
CVE-2015-3677 affects Apple OS X prior to 10.10.4, specifically the LZVN compression feature in AppleFSCompression. The vulnerability allows a crafted app to disclose kernel memory layout, a memory-disclosure issue in LZVN processing. The underlying impact is partial leakage of kernel memory layo...
CVE-2015-3690
CVE-2015-3690 affects Apple’s DiskImages in iOS < 8.4 and OS X
CVE-2015-3721
The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app...
CVE-2015-3677
The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...
CVE-2015-3676
AppleGraphicsControl in OS X before 10.10.4 could disclose kernel memory layout via a crafted app. The CVE-2015-3676 issue affects OS X Yosemite prior to the 10.10.4 Security Update, which addresses memory-disclosure by improving bounds checking in AppleGraphicsControl. There is no exploitable de...
CVE-2015-3711
CVE-2015-3711 affects Apple OS X NTFS memory-layout disclosure. The vulnerability arises from the NTFS implementation and can expose kernel memory layout via a crafted app. Affected OS X versions before 10.10.4 are implicated; remediation is to upgrade to OS X 10.10.4 (Security Update 2015‑005), ...
PT-2015-6319
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue is related to the kernel's handling of HFS parameters. Attackers can exploit this by using a crafted app to obtain sensitive memory-layout information...
PT-2015-6274
Name of the Vulnerable Software and Affected Versions OS X versions prior to 10.10.4 Description The issue allows attackers to obtain sensitive memory-layout information via a crafted app. This is related to the AppleGraphicsControl component in Apple OS X. Recommendations For versions prior to...
CVE-2015-3690: Exposure of Sensitive Information to an Unauthorized Actor
The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...
CVE-2015-3720: Exposure of Sensitive Information to an Unauthorized Actor
The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...
CVE-2015-3677: Exposure of Sensitive Information to an Unauthorized Actor
The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...