Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.10.2 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2014-8129
LibTIFF 4.0.3 allows remote malicious users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_t...
Libtiff Libtiff 4.0.3Debian Debian Linux 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Apple Mac Os X 10.10.0Apple Mac Os X 10.10.1Apple Mac Os X 10.9.5Apple Mac Os X 10.10.3Apple Mac Os X 10.10.2Apple Mac Os X 10.8.5Apple Iphone Os -
6.5
CVSSv3
CVE-2014-8130
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote malicious users to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_...
Libtiff Libtiff 4.0.3Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Workstation 6.0Apple Mac Os X 10.8.5Apple Mac Os X 10.9.5Apple Mac Os X 10.10.0Apple Mac Os X 10.10.1Apple Mac Os X 10.10.2Apple Mac Os X 10.10.3Apple Iphone Os
NA
CVE-2015-3145
The sanitize_cookie_path function in cURL and libcurl 7.31.0 up to and including 7.41.0 does not properly calculate an index, which allows remote malicious users to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie pa...
Fedoraproject Fedora 21Fedoraproject Fedora 22Canonical Ubuntu Linux 12.04Debian Debian Linux 7.0Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Haxx Curl 7.37.1Haxx Curl 7.38.0Haxx Curl 7.33.0Haxx Curl 7.34.0Haxx Curl 7.35.0Haxx Curl 7.41.0Haxx Curl 7.36.0Haxx Curl 7.37.0Haxx Curl 7.31.0Haxx Curl 7.32.0Haxx Curl 7.39.0Haxx Curl 7.40.0Apple Mac Os X 10.10.2Apple Mac Os X 10.10.3Apple Mac Os X 10.10.0
NA
CVE-2015-1130
The XPC implementation in Admin Framework in Apple OS X prior to 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.
Apple Mac Os X
NA
CVE-2015-1066
Off-by-one error in IOAcceleratorFamily in Apple OS X up to and including 10.10.2 allows malicious users to execute arbitrary code in a privileged context via a crafted app.
Apple Mac Os X
NA
CVE-2015-1061
IOSurface in Apple iOS prior to 8.2, Apple OS X up to and including 10.10.2, and Apple TV prior to 7.1 allows malicious users to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling.
Apple TvosApple Iphone OsApple Mac Os X
NA
CVE-2015-1065
Multiple buffer overflows in iCloud Keychain in Apple iOS prior to 8.2 and Apple OS X up to and including 10.10.2 allow man-in-the-middle malicious users to execute arbitrary code by modifying the client-server data stream during keychain recovery.
Apple Mac Os XApple Iphone Os
NA
CVE-2015-1067
Secure Transport in Apple iOS prior to 8.2, Apple OS X up to and including 10.10.2, and Apple TV prior to 7.1 does not properly restrict TLS state transitions, which makes it easier for remote malicious users to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted T...
Apple Mac Os XApple TvosApple Iphone Os
NA
CVE-2015-1546
Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote malicious users to cause a denial of service (crash) via a crafted search query with a matched values control.
Openldap Openldap 2.4.40Opensuse Opensuse 13.1Opensuse Opensuse 13.2Apple Mac Os X 10.10.2
NA
CVE-2014-8817
coresymbolicationd in CoreSymbolication in Apple OS X prior to 10.10.2 does not verify that expected data types are present in XPC messages, which allows malicious users to execute arbitrary code in a privileged context via a crafted app, as demonstrated by lack of verification o...
Apple Mac Os X
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook