Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3746 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securitytracker.com/id/1033274 - https://support.apple.com/
CVE ID: CVE-2015-3747 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securitytracker.com/id/1033274 - https://support.apple.com/
CVE ID: CVE-2015-3748 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securitytracker.com/id/1033274 - https://support.apple.com/
CVE ID: CVE-2015-3749 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT205221 - http://www.securitytracker.com/id/1033274 - https://support.apple.com/
CVE ID: CVE-2015-3750 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforce the HTTP Strict Transport Security (HSTS) protection mechanism for Content Security Policy (CSP) report requests, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof a report by modifying the client-server data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033274 - https://
m. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033274 - https://support.apple.com/kb/HT205030 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - http://www.securityfocus.com/bid/76341 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html - https://support.apple.com/kb/HT205033
CVE ID: CVE-2015-3751 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a Content Security Policy protection mechanism by using a video control in conjunction with an IMG element within an OBJECT element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033274 - https://support.apple.com/kb/HT205030 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://lists.apple.com/a
port.apple.com/kb/HT205030 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - http://www.securityfocus.com/bid/76341 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html - https://support.apple.com/kb/HT205033
CVE ID: CVE-2015-3752 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows remote attackers to obtain sensitive information via vectors involving (1) a cross-origin request or (2) a private-browsing request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033274 - https://support.apple.com/kb/HT205030
CVE Program Container: References: - http://www.securitytracker.com/id/1033274 - https://support.apple.com/kb/HT205030 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://www.securityfocus.com/bid/76341 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html - https://support.apple.com/kb/HT205033 - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2015-3753 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a redirect to a data:image resource. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033274 - https://support.apple.com/kb/HT205030 - http://lists.apple.com/archives/security-announce/
uritytracker.com/id/1033274 - https://support.apple.com/kb/HT205030 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - http://www.securityfocus.com/bid/76341 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html - https://support.apple.com/kb/HT205033
CVE ID: CVE-2015-3754 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The private-browsing implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching of HTTP authentication credentials, which makes it easier for remote attackers to track users via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033274 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://www.securityfocus.com/bid/76339 - http://lists.apple.com/archives/security-announce/2015/Au
16-03/msg00054.html - http://www.securityfocus.com/bid/76339 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html - https://support.apple.com/kb/HT205033
CVE ID: CVE-2015-3755 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033274 - https://support.apple.com/kb/HT205030 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - http://www.securityfocus.com/bid/76344 - ht
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - http://www.securityfocus.com/bid/76344 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.html - https://support.apple.com/kb/HT205033
CVE ID: CVE-2015-3756 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT205030 - http://www.securitytracker.com/id/1033275 - http://www.securityfocus.com/bid/76337 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
CVE ID: CVE-2015-3757 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time by visiting this pane. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3758 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime calls via an app that provides a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT205030 - http://www.securitytracker.com/id/1033275 - http://www.securityfocus.com/bid/76337 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
CVE ID: CVE-2015-3759 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT205030 - http://www.securitytracker.com/id/1033275 - http://www.securityfocus.com/bid/76337 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
CVE ID: CVE-2015-3760 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3761 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3762 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1
s/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3763 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iOS before 8.4.1 does not limit the rate of JavaScript alert messages, which allows remote attackers to cause a denial of service (apparent browser locking) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT205030 - http://www.securitytracker.com/id/1033275 - http://www.securityfocus.com/bid/76337 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
CVE ID: CVE-2015-3764 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Notification Center in Apple OS X before 10.10.5 does not properly remove dismissed notifications, which allows attackers to read arbitrary notifications via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3765 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, CVE-2015-5753, and CVE-2015-5779. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html -
s: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3766 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the mach_port_space_info interface, which allows attackers to obtain sensitive memory-layout information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT205030 - http://www.securitytracker.com/id/1033275 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - https://support.apple
015/Aug/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - https://support.apple.com/kb/HT205031 - http://www.securityfocus.com/bid/76343
CVE ID: CVE-2015-3767 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: udf in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via a malformed DMG image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3768 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that makes unspecified IOKit API calls. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT205030 - http://www.securitytracker.com/id/1033275 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - https://support.apple.com/k
g/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - https://support.apple.com/kb/HT205031 - http://www.securityfocus.com/bid/76343
CVE ID: CVE-2015-3769 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3771 and CVE-2015-3772. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3770 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-5783. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3771 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3769 and CVE-2015-3772. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3772 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3769 and CVE-2015-3771. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3773 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3774 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dictionary app in Apple OS X before 10.10.5 does not use HTTPS, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof word definitions by modifying the client-server data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3775 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:14.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple OS X before 10.10.5 does not properly implement authentication, which allows local users to obtain admin privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276
CVE ID: CVE-2015-3776 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: IOKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption and application crash) via a malformed plist. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT205030 - http://www.securitytracker.com/id/1033275 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - https://support.
nce/2015/Aug/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html - https://support.apple.com/kb/HT205031 - http://www.securityfocus.com/bid/76343
CVE ID: CVE-2015-3777 State: PUBLISHED Published: 2015-08-16T23:00:00 Last Updated: 2024-08-06T05:56:15.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76340 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - https://support.apple.com/kb/HT205031 - http://www.securitytracker.com/id/1033276