Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.10.1 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2014-8129
LibTIFF 4.0.3 allows remote malicious users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_t...
Libtiff Libtiff 4.0.3Debian Debian Linux 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Apple Mac Os X 10.10.0Apple Mac Os X 10.10.1Apple Mac Os X 10.9.5Apple Mac Os X 10.10.3Apple Mac Os X 10.10.2Apple Mac Os X 10.8.5Apple Iphone Os -
6.5
CVSSv3
CVE-2014-8130
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote malicious users to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_...
Libtiff Libtiff 4.0.3Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Workstation 6.0Apple Mac Os X 10.8.5Apple Mac Os X 10.9.5Apple Mac Os X 10.10.0Apple Mac Os X 10.10.1Apple Mac Os X 10.10.2Apple Mac Os X 10.10.3Apple Iphone Os
NA
CVE-2015-3145
The sanitize_cookie_path function in cURL and libcurl 7.31.0 up to and including 7.41.0 does not properly calculate an index, which allows remote malicious users to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie pa...
Fedoraproject Fedora 21Fedoraproject Fedora 22Canonical Ubuntu Linux 12.04Debian Debian Linux 7.0Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Haxx Curl 7.37.1Haxx Curl 7.38.0Haxx Curl 7.33.0Haxx Curl 7.34.0Haxx Curl 7.35.0Haxx Curl 7.41.0Haxx Curl 7.36.0Haxx Curl 7.37.0Haxx Curl 7.31.0Haxx Curl 7.32.0Haxx Curl 7.39.0Haxx Curl 7.40.0Apple Mac Os X 10.10.2Apple Mac Os X 10.10.3Apple Mac Os X 10.10.0
NA
CVE-2014-8834
UserAccountUpdater in Apple OS X 10.10 prior to 10.10.2 stores a PDF document's password in a printing preference file, which allows local users to obtain sensitive information by reading a file.
Apple Mac Os X 10.10.1Apple Mac Os X 10.10.0
NA
CVE-2014-8835
The xpc_data_get_bytes function in libxpc in Apple OS X prior to 10.10.2 does not verify that a dictionary's Attributes key has the xpc_data data type, which allows malicious users to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XP...
Apple Mac Os X 10.10.0Apple Mac Os X 10.10.1
NA
CVE-2014-4459
Use-after-free vulnerability in WebKit, as used in Apple OS X prior to 10.10.1, allows remote malicious users to execute arbitrary code via crafted page objects in an HTML document.
Apple SafariApple Mac Os XApple Iphone OsApple ItunesApple Tvos
NA
CVE-2014-4453
Apple iOS prior to 8.1.1 and OS X prior to 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote malicious users to obtain sensitive information via unspecified vectors.
Apple Iphone OsApple Iphone Os 8.0.2Apple Iphone Os 8.0.1Apple Iphone Os 8.0Apple Mac Os XApple Mac Os X 10.8.5Apple Mac Os X 10.8.4Apple Mac Os X 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.6.4Apple Mac Os X 10.6.3Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.4.7Apple Mac Os X 10.4.6Apple Mac Os X 10.4.1Apple Mac Os X 10.4.0Apple Mac Os X 10.3.3Apple Mac Os X 10.3.2Apple Mac Os X 10.2.5Apple Mac Os X 10.2.4Apple Mac Os X 10.1.4
NA
CVE-2014-4458
The "System Profiler About This Mac" component in Apple OS X prior to 10.10.1 includes extraneous cookie data in system-model requests, which might allow remote malicious users to obtain sensitive information via unspecified vectors.
Apple Mac Os XApple Mac Os X 10.8.5Apple Mac Os X 10.8.4Apple Mac Os X 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.6.4Apple Mac Os X 10.6.3Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.4.7Apple Mac Os X 10.4.6Apple Mac Os X 10.4.1Apple Mac Os X 10.4.0Apple Mac Os X 10.3.3Apple Mac Os X 10.3.2Apple Mac Os X 10.2.5Apple Mac Os X 10.2.4Apple Mac Os X 10.1.4Apple Mac Os X 10.1.3Apple Mac Os X 10.9.3Apple Mac Os X 10.9.2Apple Mac Os X 10.8.1
NA
CVE-2014-4460
CFNetwork in Apple iOS prior to 8.1.1 and OS X prior to 10.10.1 does not properly clear the browsing cache upon a transition out of private-browsing mode, which makes it easier for physically proximate malicious users to obtain sensitive information by reading cache files.
Apple Iphone Os 8.0Apple Iphone OsApple Iphone Os 8.0.2Apple Iphone Os 8.0.1Apple Mac Os X 10.9Apple Mac Os X 10.8.5Apple Mac Os X 10.7.5Apple Mac Os X 10.7.4Apple Mac Os X 10.6.6Apple Mac Os X 10.6.5Apple Mac Os X 10.6.4Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.4.9Apple Mac Os X 10.4.8Apple Mac Os X 10.4.11Apple Mac Os X 10.4.10Apple Mac Os X 10.4.1Apple Mac Os X 10.3.5Apple Mac Os X 10.3.4Apple Mac Os X 10.2.7Apple Mac Os X 10.2.6
NA
CVE-2014-8517
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 up to and including 5.1.4, 5.2 up to and including 5.2.2, 6.0 up to and including 6.0.6, and 6.1 up to and including 6.1.5 allows remote malicious users to execute arbitrary commands via a | (pipe) char...
Apple Mac Os X 10.10.1Apple Mac Os X 10.10.0Apple Mac Os X 10.9.5Apple Mac Os X 10.8.5Netbsd Netbsd 5.1.3Netbsd Netbsd 5.1.4Netbsd Netbsd 5.2Netbsd Netbsd 6.0.4Netbsd Netbsd 6.0.5Netbsd Netbsd 6.1.5Netbsd Netbsd 5.1Netbsd Netbsd 6.0Netbsd Netbsd 6.0.1Netbsd Netbsd 6.1.1Netbsd Netbsd 6.1.2Netbsd Netbsd 5.2.1Netbsd Netbsd 5.2.2Netbsd Netbsd 6.0.6Netbsd Netbsd 6.1Netbsd Netbsd 5.1.1Netbsd Netbsd 5.1.2Netbsd Netbsd 6.0.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook