Download
| Alert*
oval:org.mitre.oval:def:6885
ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted BMP image. oval:org.secpod.oval:def:3343 The host is installed with Apple Safari before 4.0.5 or Apple iTunes before 9.1 and is prone to an information disclosure vulnerability. A flaw is present in the applications, which fail to ensure that memory access is associated with initialized memory. Successful exploitation could allow attackers ... oval:org.secpod.oval:def:3342 The host is missing an important security update according to Apple advisory, APPLE-SA-2010-03-30-2. A flaw is present in the application, which fails to sanitize user supplied input. Successful exploitation could allow attackers to disclose sensitive information. oval:org.secpod.oval:def:3347 The host is missing an important security update according to Apple advisory, APPLE-SA-2010-03-30-2. A flaw is present in the application, which fails to sanitize user supplied input. Successful exploitation could allow attackers to disclose sensitive information. oval:org.secpod.oval:def:3486 The host is installed with Apple Safari before 5.0.4 and is prone to multiple memory corruption vulnerabilities. The flaws are present in the application, which fails to sanitize user supplied input. Successful exploitation could allow attackers to crash the service. oval:org.secpod.oval:def:3497 The host is installed with Apple Safari before 4.0.5 and is prone to multiple memory corruption vulnerabilities. The flaws are present in the application, which fails to handle user supplied input. Successful exploitation could allow attackers to crash the service. |