EUVD-2016-5737

Malware in sbrugna...

Apple OS X Information Disclosure Vulnerability (CNVD-2016-08245)

Apple OS X is a specialized operating system developed by Apple for Mac computers. The SecKeyDeriveFromPassword function in Apple OS X versions prior to 10.12 has an information disclosure vulnerability that can be exploited by an attacker to gain access to sensitive information in process memory...

CVE-2016-4752

The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CFRETURNSRETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation...

Design/Logic Flaw

The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CFRETURNSRETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation...

CVE-2016-4752

The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CFRETURNSRETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation...