PT-2012-4954

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.0.1 Description The issue arises from improper handling of the Quarantine attribute of HTML documents. This allows remote attackers to read arbitrary files on a user's system by leveraging the presence of a...

CVE-2012-3713: Undefined Security Weakness

Apple Safari before 6.0.1 does not properly handle the Quarantine attribute of HTML documents, which allows user-assisted remote attackers to read arbitrary files by leveraging the presence of a downloaded document...

Apple Safari Arbitrary Code Execution

No description provided by source. CVE: CVE-2011-3230 Found By: Aaron Sigel of vtty.com There's not a ton to say about this bug aside from "Yikes"! I think the PoC speaks for itself. This allows you to send any "file:" url to LaunchServices, which will run binaries, launch applications, or open...

CA Total Defense Suite - reGenerateReports Stored procedure SQL Injection (Metasploit)

$Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)

This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-001.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.6 Multiple Vulnerabilities 2011-001 Authors: Antu Sanadi Copyright:...

Mac OS X v10.6.7 Multiple Vulnerabilities (2011-003)

This host is missing an important security update according to Mac OS X 10.6.7 Update/Mac OS X Security Update 2011-003. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-003.nasl 7024 2017-08-30 11:51:43Z teissa $ Mac OS X v10.6.7 Multiple Vulnerabilities 2011-003 Authors: Antu Sanadi Copyright:...

Mac OS X v10.6.7 Multiple Vulnerabilities (2011-003)

This host is missing an important security update according to Mac OS X 10.6.7 Update/Mac OS X Security Update 2011-003. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Apple Releases Malware Detection Tool

Apple has released Security Update 2011-003 for Mac OS X in response to the recent Mac fake anti-virus software. This update: adds a malware definition to the File Quarantine application causes the File Quarantine application to automatically update its malware definition list daily removes...

Mac OS X Multiple Vulnerabilities (Security Update 2011-003)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2011-003 applied. This security update contains fixes for the following issues : - A definition for OSX.MacDefender.A has been added to the malware check within File Quarantine. - The system will now check...

Mac OS X 10.6.x < 10.6.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.7. Mac OS X 10.6.7 contains security fixes for the following products : - AirPort - Apache - AppleScript - ATS - bzip2 - CarbonCore - ClamAV - CoreText - File Quarantine - HFS - ImageIO - Image RAW - Installer - Kerbero...

Avira AntVir QUA file in (avcenter.exe) Local Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/perl ================================================================================= | | Title : Avira AntVir QUA file in avcenter.exe Local Crash PoC | | Author : KedAns-Dz | | email : email protected | | Home : HMD/AM 30500/04300 -...

Symantec Alert Management System pagehndl.dll Stack Buffer Overflow (CVE-2010-0110)

Symantec Alert management System 2 AMS2 is a package used by various Symantec solutions such as System Center, AntiVirus Server, and AntiVirus Central Quarantine Server. AMS2 starts multiple services on the system that run with System account privileges, by default. A stack buffer overflow...

Avira AntiVirus QUA File Crash

!/usr/bin/perl ================================================================================= | | Title : Avira AntVir QUA file in avcenter.exe Local Crash PoC | | Author : KedAns-Dz | | email : [email protected] | | Home : HMD/AM 30500/04300 - Algeria -00213555248701 | | Web Site : /-\ ... | ...

CVE-2011-0688

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...

Information disclosure

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...

Code injection

HDNLRSVC.EXE in the Intel Alert Handler service aka Symantec Intel Handler service in Intel Alert Management System aka AMS or AMS2, as used in Symantec AntiVirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows...

Stack overflow

Multiple stack-based buffer overflows in Intel Alert Management System aka AMS or AMS2, as used in Symantec AntiVirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via 1 ...

CVE-2011-0688

CVE-2011-0688 affects Intel Alert Management System (AMS/AMS2) as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x (before 10.1 MR10), Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5/3.6. It allows remote attackers to execute arbitrary commands via crafted TCP messa...

CVE-2011-0688

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...

CVE-2010-0111

CVE-2010-0111 affects Intel Alert Management System (AMS/AMS2) as used in Symantec AntiVirus Corporate Edition prior to 10.1 MR10, Symantec System Center 10.x, and Symantec Quarantine Server 3.5/3.6. The HDNLRSVC.EXE Intel Alert Handler service can be influenced via a UNC share pathname supplied ...