Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3647 State: PUBLISHED Published: 2015-05-21T20:00:00 Last Updated: 2024-08-06T05:47:57.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus (aka WPPA) plugin before 6.1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) comemail or (2) comname parameter in a wppa do-comment action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74741 - https://www.htbridge.com/advisory/HTB23257 - http://www.securityfocus.com/archive/1/535575/100/0/threaded - https://wordpress.org/plugins/wp-p
om/advisory/HTB23257 - http://www.securityfocus.com/archive/1/535575/100/0/threaded - https://wordpress.org/plugins/wp-photo-album-plus/changelog/ - http://packetstormsecurity.com/files/131976/WordPress-WP-Photo-Album-Plus-6.1.2-Cross-Site-Scripting.html
CVE ID: CVE-2015-3648 State: PUBLISHED Published: 2015-06-09T14:00:00 Last Updated: 2024-08-06T05:47:57.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the defaultlanguage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB23258 - http://packetstormsecurity.com/files/132142/ResourceSpace-7.1.6513-Local-File-Inclusion.html - http://www.securityfocus.com/archive/1/535669/100/0/threaded - http://svn.montala.com/websvn/revision.p
Inclusion.html - http://www.securityfocus.com/archive/1/535669/100/0/threaded - http://svn.montala.com/websvn/revision.php?repname=ResourceSpace&path=%2F&rev=6640&peg=6738 - http://www.securityfocus.com/bid/75019
CVE ID: CVE-2015-3649 State: PUBLISHED Published: 2017-08-18T16:00:00 Last Updated: 2024-08-06T05:47:57.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb#L39 - https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb#L115 - https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/ca
i-cached/blob/master/lib/open-uri/cached.rb#L115 - https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb#L25 - http://www.openwall.com/lists/oss-security/2015/05/06/2 - http://www.securityfocus.com/bid/74469 - http://www.benjaminfleischer.com/2013/03/20/yaml-and-security-in-ruby/
CVE ID: CVE-2015-3650 State: PUBLISHED Published: 2015-07-10T17:00:00 Last Updated: 2024-08-06T05:47:58.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1, VMware Player 5.x and 6.x before 6.0.7 and 7.x before 7.1.1, and VMware Horizon Client 5.x local-mode before 5.4.2 on Windows does not provide a valid DACL pointer during the setup of the vprintproxy.exe process, which allows host OS users to gain host OS privileges by injecting a thread. Additional Analyst Notes: - CVE Program Container: References: - https://www.nettitude.co.uk/vmware-multiple-products-privilege-escalation/ - http://w
E Program Container: References: - https://www.nettitude.co.uk/vmware-multiple-products-privilege-escalation/ - http://www.vmware.com/security/advisories/VMSA-2015-0005.html - http://www.securitytracker.com/id/1032822 - http://www.securitytracker.com/id/1032823
CVE ID: CVE-2015-3653 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T05:47:57.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating system and consequently cause a denial of service or gain privileges by leveraging incorrect permission checking. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100593 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt
CVE ID: CVE-2015-3654 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T05:47:57.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-4649. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt - http://www.securityfocus.com/bid/100602
CVE ID: CVE-2015-3655 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T05:47:57.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token. Additional Analyst Notes: - CVE Program Container: References: - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt - http://www.securityfocus.com/bid/100594
CVE ID: CVE-2015-3656 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T05:47:57.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100597 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt
CVE ID: CVE-2015-3657 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T05:47:58.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain "Super Admin" privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100600 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt
CVE ID: CVE-2015-3658 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204941 - http://support.apple.com/kb/HT204950 - http://www.securityfocus.com/bid/754
es: - http://support.apple.com/kb/HT204941 - http://support.apple.com/kb/HT204950 - http://www.securityfocus.com/bid/75492 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html - http://www.securitytracker.com/id/1032754 - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2015-3659 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204941 - http://support.apple.com/kb/HT204950 - http://www.securityfocus.
r: References: - http://support.apple.com/kb/HT204941 - http://support.apple.com/kb/HT204950 - http://www.securityfocus.com/bid/75492 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html - http://www.securitytracker.com/id/1032754 - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2015-3660 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the PDF functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL in embedded PDF content. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204950 - http://www.securityfocus.com/bid/75494 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.h
nsuse.org/opensuse-updates/2016-03/msg00054.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html - http://www.securitytracker.com/id/1032754
CVE ID: CVE-2015-3661 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, CVE-2015-3667, and CVE-2015-3668. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204947 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityf
.apple.com/kb/HT204947 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032756 - http://support.apple.com/kb/HT204942 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00005.html
CVE ID: CVE-2015-3662 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3663, CVE-2015-3666, CVE-2015-3667, and CVE-2015-3668. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204947 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityf
CVE ID: CVE-2015-3663 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3666, CVE-2015-3667, and CVE-2015-3668. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204947 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityf
CVE ID: CVE-2015-3664 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3665 and CVE-2015-3669. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204947 - http://www.securityfocus.com/bid/75499 - http://www.securitytracker.com/id/1032756 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00005.html
CVE ID: CVE-2015-3665 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3664 and CVE-2015-3669. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204947 - http://www.securitytracker.com/id/1032756 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00005.html - http://www.securityfocus.com/bid/75498
CVE ID: CVE-2015-3666 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3667, and CVE-2015-3668. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204947 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityf
CVE ID: CVE-2015-3667 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3668. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204947 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityf
CVE ID: CVE-2015-3668 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3667. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT204947 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityf
CVE ID: CVE-2015-3669 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: QT Media Foundation in Apple QuickTime before 7.7.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3664 and CVE-2015-3665. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75497 - http://support.apple.com/kb/HT204947 - http://www.securitytracker.com/id/1032756 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00005.html
CVE ID: CVE-2015-3670 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-3671 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to bypass authentication and obtain admin privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3672 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin Framework in Apple OS X before 10.10.4 does not properly handle authentication errors, which allows local users to obtain admin privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3673 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - https://www.exploit-db.com/exploits/38036/ - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3674 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3675 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to bypass HTTP authentication via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3676 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleGraphicsControl in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3677 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3678 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified Thunderbolt commands. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3679 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3680, CVE-2015-3681, and CVE-2015-3682. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3680 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3681, and CVE-2015-3682. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3681 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:58.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3682. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942
CVE ID: CVE-2015-3682 State: PUBLISHED Published: 2015-07-03T01:00:00 Last Updated: 2024-08-06T05:47:57.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3681. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://www.securityfocus.com/bid/75493 - http://www.securitytracker.com/id/1032760 - http://support.apple.com/kb/HT204942