CVE-2015-7018 – Apple Security Advisory 2015-10-21-4
https://notcve.org/view.php?id=CVE-2015-7018
21 Oct 2015 — FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, and CVE-2015-7010. FontParser en Apple iOS en versiones anteriores a 9.1 y OS X en versiones anteriores a 10.11.1 permite a atacantes remotos ejecutar código arbitrario o provoca... • http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2015-7019 – Apple Security Advisory 2015-10-21-4
https://notcve.org/view.php?id=CVE-2015-7019
21 Oct 2015 — The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7020. El controlador NVIDIA en el subsistema Graphics Drivers en Apple OS X en versiones anteriores a 10.11.1 permite a usuarios locales obtener información sensible de la memoria del kernel o provocar una denegación de servicio ... • https://packetstorm.news/files/id/135423 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2015-7020 – Apple Security Advisory 2015-10-21-4
https://notcve.org/view.php?id=CVE-2015-7020
21 Oct 2015 — The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7019. El controlador NVIDIA en el subsistema Graphics Drivers en Apple OS X en versiones anteriores a 10.11.1 permite a usuarios locales obtener información sensible de la memoria del kernel o provocar una denegación de servicio ... • http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2015-5924 – Apple Security Advisory 2015-10-21-4
https://notcve.org/view.php?id=CVE-2015-5924
21 Oct 2015 — The OpenGL implementation in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. La implementación OpenGL en Apple iOS en versiones anteriores a 9.1 y OS X en versiones anteriores a 10.11.1 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado. iOS 9.1 is now available and addresses arbitrary cod... • http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2015-5925 – Apple Security Advisory 2015-10-21-4
https://notcve.org/view.php?id=CVE-2015-5925
21 Oct 2015 — The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-5926. El componente CoreGraphics en Apple iOS en versiones anteriores a 9.1, OS X en versiones anteriores a 10.11.1 y watchOS en versiones anteriores a 2.0.1 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio ... • http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2015-7761
https://notcve.org/view.php?id=CVE-2015-7761
09 Oct 2015 — Mail in Apple OS X before 10.11 does not properly recognize user preferences, which allows attackers to obtain sensitive information via an unspecified action during the printing of an e-mail message, a different vulnerability than CVE-2015-7760. Mail en Apple OS X en versiones anteriores a 10.11 no reconoce correctamente las preferencias de usuario, lo que permite a atacantes obtener información sensible a través de una acción no especificada durante la impresión de un mensaje de correo electrónico, una vu... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2015-7760
https://notcve.org/view.php?id=CVE-2015-7760
09 Oct 2015 — libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service (resource consumption) by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761. libxpc en launchd en Apple OS X en versiones anteriores a 10.11 no restringe la creación de procesos para conexiones de red, lo que permite a atacantes remotos causar una denegación de servicio (consumo de recursos) conectando r... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html • CWE-399: Resource Management Errors •
CVE-2015-3785 – Apple Security Advisory 2015-09-30-03
https://notcve.org/view.php?id=CVE-2015-3785
01 Oct 2015 — The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors. El componente Telephony en Apple OS X en versiones anteriores a 10.11, cuando la funcionalidad Continuity está habilitada, permite a usuarios locales eludir las restricciones destinadas a llamadas telefónicas a través de vectores no especificados. OS X El Capitan 10.11 is now available and addresses close to 100 vulnerabilities... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html •
CVE-2015-5830 – Apple Security Advisory 2015-09-30-03
https://notcve.org/view.php?id=CVE-2015-5830
01 Oct 2015 — The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5877. El componente Intel Graphics Driver en Apple OS X en versiones anteriores 10.11 permite a usuarios locales obtener privilegios o provocar una denegación de servicio (corrupción de memoria) a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-5877. OS X El Capitan 1... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2015-5833 – Apple Security Advisory 2015-09-30-03
https://notcve.org/view.php?id=CVE-2015-5833
01 Oct 2015 — The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation. El componente Login Window en Apple OS X en versiones anteriores a 10.11 no asegura que la pantalla esté bloqueada el tiempo previsto, lo que permite a atacantes físicamente próximos obtener acceso visitando una estación de trabajo desatendida. OS X El Capitan 10.11 is now available and addres... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html • CWE-254: 7PK - Security Features •