Apple Security Advisory 2015-03-19-1 - Security Update 2015-003 is now available and addresses iCloud Keychain and IOSurface code execution vulnerabilities.
8babad290e1ff7fcd97fdf370c8dd057dd274840372566fa110b05cbec2fbce5The Xerces-C XML parser mishandles certain kinds of malformed input documents, resulting in a segmentation fault during a parse operation. The bug does not appear to allow for remote code execution, but is a denial of service attack that in many applications may allow for an unauthenticated attacker to supply malformed input and cause a crash. Versions of the library prior to 3.1.2 are affected.
3dd245d7876fe454d3a8c1ec13a6484e7872039a9697ae145a93ae658dfca1a2Et-Chat version 3.0.6 suffers from a cross site scripting vulnerability.
80e1a4d6b660f8125854153118580e5f380c83819f4170fcf51420d028dfeb57PHP SoapClient in various PHP versions suffers from a type confusion that allows for information leakage.
e966d500ed0d4194c51186062d3c39579e4b806229a855ac04afddc816ae79eaKunstmaan CMS suffers from an open redirection vulnerability.
4aeed2b050d1ca14f79f6263c116c8d2301cb3e0d4fc64e891c2fa828eee1d6a
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed