CVSS: 9.8EPSS: 0%CPEs: 140EXPL: 0CVE-2012-0654 – Apple Security Advisory 2012-05-09-1
https://notcve.org/view.php?id=CVE-2012-0654
10 May 2012 — libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted certificate. libsecurity en Apple Mac OS X antes de v10.7.4 acceda a posiciones de memoria sin inicializar durante la tramitación de los certificados X.509, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (caída de... • http://lists.apple.com/archives/security-announce/2012/May/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 140EXPL: 0CVE-2012-0655 – Apple Security Advisory 2012-05-09-1
https://notcve.org/view.php?id=CVE-2012-0655
10 May 2012 — libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by conducting a spoofing or network-sniffing attack during communication with a site that uses a short key. libsecurity en Apple Mac OS X anteriores a 10.7.4 no restringe apropiadamente la longitud de las claves RSA de certificados X.509, lo que facilita a atacantes remotos evitar los mecanismos de pr... • http://lists.apple.com/archives/security-announce/2012/May/msg00001.html • CWE-310: Cryptographic Issues •
CVSS: 8.8EPSS: 34%CPEs: 11EXPL: 2CVE-2011-3026 – libpng: Heap buffer overflow in png_decompress_chunk (MFSA 2012-11)
https://notcve.org/view.php?id=CVE-2011-3026
15 Feb 2012 — Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation. Desbordamiento de entero en libpng, tal como se utiliza en Google Chrome antes de v17.0.963.56, permite a atacantes remotos causar una denegación de servicio o posiblemente tener un impacto no especificado a través de vectores desconocidos que provocan el truncado de enteros. Nicolas Gre... • https://github.com/argp/cve-2011-3026-firefox • CWE-122: Heap-based Buffer Overflow CWE-190: Integer Overflow or Wraparound •