Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3683 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3684 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted credentials in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
urity-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
CVE ID: CVE-2015-3685 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3686, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/10
204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
CVE ID: CVE-2015-3686 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html -
5491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
CVE ID: CVE-2015-3687 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3688, and CVE-2015-3689. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html -
CVE ID: CVE-2015-3688 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3689. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html -
CVE ID: CVE-2015-3689 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3688. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/10
CVE ID: CVE-2015-3690 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/
cker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
CVE ID: CVE-2015-3691 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3692 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not enforce a locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00003.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://support.apple.com/kb/HT204942 - http://www.securityfocus.com/bid/7
ves/security-announce/2015/Jun/msg00002.html - http://support.apple.com/kb/HT204942 - http://www.securityfocus.com/bid/75495 - http://www.securitytracker.com/id/1032444 - http://support.apple.com/kb/HT204934
CVE ID: CVE-2015-3693 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service (memory corruption), by triggering certain patterns of access to memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00003.html - http://googleprojectzero.blogspot.co
ences: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00003.html - http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032755 - http://support.apple.com/kb/HT204942 - http://www.securityfocus.com/bid/75495 - http://www.securitytracker.com/id/1032444 - http://support.apple.com/kb/HT204934
CVE ID: CVE-2015-3694 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3719. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 -
ty-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
CVE ID: CVE-2015-3695 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT
ml - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3696 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT
CVE ID: CVE-2015-3697 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:15.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT
CVE ID: CVE-2015-3698 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT
CVE ID: CVE-2015-3699 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT
CVE ID: CVE-2015-3700 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3701, and CVE-2015-3702. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT
CVE ID: CVE-2015-3701 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, and CVE-2015-3702. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT
CVE ID: CVE-2015-3702 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, and CVE-2015-3701. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT
CVE ID: CVE-2015-3703 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announc
securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
CVE ID: CVE-2015-3704 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133547/OS-X-Privilege-Escalation.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - https://www.exploit-db.com/exploits/38138/ - http://www.securityfocus.com/bid/75493 - htt
ounce/2015/Jun/msg00002.html - https://www.exploit-db.com/exploits/38138/ - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3705 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:15.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3706. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3706 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3705. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3707 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3708 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a crafted app that conducts a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3709 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3710 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:15.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and consequently cause a visit to an arbitrary web site, via a crafted HTML e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75491 - http://support.apple.com/kb/HT204941 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archi
2.html - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
CVE ID: CVE-2015-3711 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3712 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NVIDIA graphics driver in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds write) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3713 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:14.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted movie file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securitytracker.com/id/1032757 - http://www.securityfocus.com/bid/75493 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3714 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:56:15.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which allows attackers to bypass intended launch restrictions via a modified app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942