CVE Vulnerability Catalog

The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process. This allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space process to observe data related to the random numbers.

IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, allowing attackers to execute arbitrary code in a privileged context.

IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties.

Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments.

IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, allowing attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields.

Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, allowing attackers to execute arbitrary code as root via a crafted application.

The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, allowing attackers to execute arbitrary code in the kernel's context via a crafted application.

An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking, allowing attackers to bypass the ASLR protection mechanism via a crafted application.

A double free vulnerability in Apple iOS before version 8 and Apple TV before version 7 allows local users to gain privileges or cause a denial of service (device crash) via vectors related to Mach ports.

The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 contains a vulnerability that allows attackers to cause a denial of service via an application using crafted arguments.

EMC Documentum Content Server before version 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subgroups of privileged groups. This allows remote authenticated sysadmins to gain super-user privileges and bypass intended restrictions on data access and server actions.

EMC Documentum Content Server before version 6.7 SP2 P17, 7.0 through P15, and 7.1 before P08 does not properly check authorization for subtypes of protected system types. This allows remote authenticated users to obtain super-user privileges for system-object creation and bypass intended restrictions on data access and server actions.

The hook feature in the NtSetInformationFile system call in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, enabling the execution of native code in a privileged context via an NTFS junction attack.

A heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 allows attackers to execute arbitrary code.

Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X contain a vulnerability that allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X are vulnerable to attacks that can lead to denial of service due to memory corruption.

A heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 allows attackers to execute arbitrary code.

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.