EUVD-2015-3802

Malware in sbrugna...

EUVD-2015-3712

Malware in sbrugna...

EUVD-2016-5761

Malware in sbrugna...

Remote code execution

An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parsetree in toc.cxx, this possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution...

CVE-2021-34121

CVE-2021-34121 affects htmodoc 1.9.12, where an Out-of-Bounds condition in parse_tree() (toc.cxx) can leak memory layout information. The connected sources corroborate this flaw and note the issue could be leveraged in a chain to reach code execution. The available documents specify the vulnerabl...

PT-2021-4258

Name of the Vulnerable Software and Affected Versions dmg2img versions through 20170502 Description A flaw was found in the fill mishblk function, which does not check the length of the read buffer and copies 0xCC bytes from it. The length of the buffer is controlled by an attacker, allowing for ...

CVE-2016-7714

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOKit" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

PT-2017-15384

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.3 Description The issue involves the IOAudioFamily component and allows attackers to obtain sensitive kernel memory-layout information via a crafted app. Recommendations For macOS versions prior to 10.12.3, update...

PT-2016-6082

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue allows local users to obtain sensitive kernel memory-layout information or cause a denial of service via unspecified vectors, potentially related to a use-after-free privilege escalati...

PT-2016-2283

Name of the Vulnerable Software and Affected Versions Intel Graphics Driver in Apple OS X versions prior to 10.11.5 Description The issue is related to errors in security settings of the Intel Graphics Driver component in Mac OS X, allowing a remote attacker to obtain sensitive kernel memory-layo...

CVE-2016-1790: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2016-1758

The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app...

CVE-2016-1732

AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2016-1758: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app...

CVE-2015-5870

The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors...

PT-2015-2276

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to the debugging interfaces in the kernel, which lack protection of internal data. This allows a local attacker to potentially obtain sensitive memory-layout information. The...

CVE-2015-5842: Exposure of Sensitive Information to an Unauthorized Actor

XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive memory-layout information via unknown vectors...

CVE-2015-5831: Exposure of Sensitive Information to an Unauthorized Actor

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3780

The Bluetooth subsystem in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-3766

The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the machportspaceinfo interface, which allows attackers to obtain sensitive memory-layout information via a crafted app...