deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-4642
Published: 2016-05-16
Description: The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d2ac264ffea5ca2e85640b6736e0c7cd4ee9a4a9; http://openwall.com/lists/oss-security/2015/06/18/6; http://php.net/ChangeLog-5.php
CVE: CVE-2015-4643
Published: 2016-05-16
Description: Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0765623d6991b62ffcd93ddb6be8a5203a2fa7e2; http://openwall.com/lists/oss-security/2015/06/18/6; http://php.net/ChangeLog-5.php
CVE: CVE-2015-4644
Published: 2016-05-16
Description: The php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not validate token extraction for table names, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted name.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1352.
CVSS Score: 7.5 (HIGH)
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2cc4e69cc6d8dbc4b3568ad3dd583324a7c11d64; http://openwall.com/lists/oss-security/2015/06/18/6; http://php.net/ChangeLog-5.php
CVE: CVE-2015-5589
Published: 2016-05-16
Description: The phar_convert_to_other function in ext/phar/phar_object.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 does not validate a file pointer before a close operation, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted TAR archive that is mishandled in a Phar::convertToData call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=bf58162ddf970f63502837f366930e44d6a992cf; http://openwall.com/lists/oss-security/2015/07/18/1; http://php.net/ChangeLog-5.php
CVE: CVE-2015-6834
Published: 2016-05-16
Description: Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.
CVSS Score: 9.8 (CRITICAL)
References: http://php.net/ChangeLog-5.php; http://www.debian.org/security/2015/dsa-3358; http://www.securityfocus.com/bid/76649
CVE: CVE-2015-6835
Published: 2016-05-16
Description: The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted session content.
CVSS Score: 9.8 (CRITICAL)
References: http://php.net/ChangeLog-5.php; http://www.debian.org/security/2015/dsa-3358; http://www.securityfocus.com/bid/76734
CVE: CVE-2015-6837
Published: 2016-05-16
Description: The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation during initial error checking, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6838.
CVSS Score: 7.5 (HIGH)
References: http://php.net/ChangeLog-5.php; http://www.debian.org/security/2015/dsa-3358; http://www.securityfocus.com/bid/76738
CVE: CVE-2015-6838
Published: 2016-05-16
Description: The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility of a NULL valuePop return value before proceeding with a free operation after the principal argument loop, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted XML document, a different vulnerability than CVE-2015-6837.
CVSS Score: 7.5 (HIGH)
References: http://php.net/ChangeLog-5.php; http://www.debian.org/security/2015/dsa-3358; http://www.securityfocus.com/bid/76733
CVE: CVE-2015-8835
Published: 2016-05-16
Description: The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not properly retrieve keys, which allows remote attackers to cause a denial of service (NULL pointer dereference, type confusion, and application crash) or possibly execute arbitrary code via crafted serialized data representing a numerically indexed _cookies array, related to the SoapClient::__call method in ext/soap/soap.c.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
CVE: CVE-2015-8838
Published: 2016-05-16
Description: ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=97aa752fee61fccdec361279adbfb17a3c60f3f4; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html
CVE: CVE-2015-8873
Published: 2016-05-16
Description: Stack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allows remote attackers to cause a denial of service (segmentation fault) via recursive method calls.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=4d2278143a08b7522de9471d0f014d7357c28fea; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html; http://php.net/ChangeLog-5.php
CVE: CVE-2015-8874
Published: 2016-05-16
Description: Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html; http://php.net/ChangeLog-5.php; http://rhn.redhat.com/errata/RHSA-2016-2750.html
CVE: CVE-2016-2554
Published: 2016-05-16
Description: Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TAR archive.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html
CVE: CVE-2016-3185
Published: 2016-05-16
Description: The make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (type confusion and application crash) via crafted serialized _cookies data, related to the SoapClient::__call method in ext/soap/soap.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
CVE: CVE-2016-0306
Published: 2016-05-17
Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.5.10, when FIPS 140-2 is enabled, misconfigures TLS, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PI56190; http://www-01.ibm.com/support/docview.wss?uid=swg21979231; http://www.securityfocus.com/bid/85978
CVE: CVE-2016-0323
Published: 2016-05-17
Description: The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20[PII_REDACTED] allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an intended HTTPS trust-management feature, via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21979682; http://www-01.ibm.com/support/docview.wss?uid=swg21979682
CVE: CVE-2016-3627
Published: 2016-05-17
Description: The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-674
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html; http://rhn.redhat.com/errata/RHSA-2016-2957.html
CVE: CVE-2016-3674
Published: 2016-05-17
Description: Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183180.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183208.html; http://rhn.redhat.com/errata/RHSA-2016-2822.html
CVE: CVE-2016-3705
Published: 2016-05-17
Description: The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to cause a denial of service (stack consumption and application crash) via a crafted XML document containing a large number of nested entity references.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html; http://rhn.redhat.com/errata/RHSA-2016-2957.html
CVE: CVE-2016-3721
Published: 2016-05-17
Description: Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-17
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; http://www.openwall.com/lists/oss-security/2024/05/02/3; https://access.redhat.com/errata/RHSA-2016:1206
CVE: CVE-2016-3722
Published: 2016-05-17
Description: Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the "full name."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:1206; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11
CVE: CVE-2016-3723
Published: 2016-05-17
Description: Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:1206; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11
CVE: CVE-2016-3724
Published: 2016-05-17
Description: Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:1206; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11
CVE: CVE-2016-3725
Published: 2016-05-17
Description: Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:1206; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11
CVE: CVE-2016-3726
Published: 2016-05-17
Description: Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
CVSS Score: 7.4 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:1206; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11
CVE: CVE-2016-3727
Published: 2016-05-17
Description: The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2016-1773.html; https://access.redhat.com/errata/RHSA-2016:1206; https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11
CVE: CVE-2016-4425
Published: 2016-05-17
Description: Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-674
References: http://www.debian.org/security/2015/dsa-3577; http://www.openwall.com/lists/oss-security/2016/05/01/5; http://www.openwall.com/lists/oss-security/2016/05/02/1
CVE: CVE-2016-2189
Published: 2016-05-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-4565.  Reason: This candidate is a reservation duplicate of CVE-2016-4565.  Notes: All CVE users should reference CVE-2016-4565 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-3719
Published: 2016-05-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2016-0707
Published: 2016-05-18
Description: The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.1.2; https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.1.2
CVE: CVE-2016-0731
Published: 2016-05-18
Description: The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-284
References: https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.2.1; https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_releasenotes_ambari_2.2.1.0/content/ambari_relnotes-2.2.1.0-cves.html; https://issues.apache.org/jira/browse/AMBARI-14780
CVE: CVE-2016-2077
Published: 2016-05-18
Description: VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securitytracker.com/id/1035900; http://www.vmware.com/security/advisories/VMSA-2016-0005.html; http://www.securitytracker.com/id/1035900
CVE: CVE-2016-4480
Published: 2016-05-18
Description: The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
CVSS Score: 8.4 (HIGH)
CWE: CWE-264
References: http://www.debian.org/security/2016/dsa-3633; http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2[PII_REDACTED].html; http://www.securityfocus.com/bid/90710
CVE: CVE-2016-0719
Published: 2016-05-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-0718.  Reason: This candidate is a reservation duplicate of CVE-2016-0718.  Notes: All CVE users should reference CVE-2016-0718 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-2208
Published: 2016-05-19
Description: The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation and system crash) via a malformed PE header file.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-399
References: http://www.securityfocus.com/bid/90653; http://www.securitytracker.com/id/1035903; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20160516_00
CVE: CVE-2015-8865
Published: 2016-05-20
Description: The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: http://bugs.gw.com/view.php?id=522; http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fe13566c93f118a15a96320a546c7878fd0cfc5e; http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
CVE: CVE-2016-1742
Published: 2016-05-20
Description: Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2016/May/msg00006.html; http://www.securitytracker.com/id/1035887; https://support.apple.com/HT206379
CVE: CVE-2016-1790
Published: 2016-05-20
Description: Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
CVSS Score: 3.3 (LOW)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://www.securitytracker.com/id/1035890; https://support.apple.com/HT206568
CVE: CVE-2016-1791
Published: 2016-05-20
Description: The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1792
Published: 2016-05-20
Description: The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1793
Published: 2016-05-20
Description: AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 7.8 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://packetstormsecurity.com/files/137401/OS-X-AppleGraphicsDeviceControl-NULL-Pointer-Dereference.html; http://www.securityfocus.com/bid/90696
CVE: CVE-2016-1794
Published: 2016-05-20
Description: The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 7.8 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://packetstormsecurity.com/files/137402/OS-X-AppleMuxControl.kext-NULL-Pointer-Dereference.html; http://www.securityfocus.com/bid/90696
CVE: CVE-2016-1795
Published: 2016-05-20
Description: AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1796
Published: 2016-05-20
Description: Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds memory access) via a crafted app.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1797
Published: 2016-05-20
Description: Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1798
Published: 2016-05-20
Description: Audio in Apple OS X before 10.11.5 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 3.3 (LOW)
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895