An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \CoreFoundation\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \Audio\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.

denial of service
memory corruption
arbitrary code execution


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \WebKit Web Inspector\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \WindowServer\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \ImageIO\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.


An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \Intel Graphics Driver\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \CoreMedia\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .mov file.


An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \CoreText\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \IOGraphics\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \IOATAFamily\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \Intel Graphics Driver\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \FontParser\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file.


An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the \Graphics Drivers\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \Foundation\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the \WebKit\ component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \ImageIO\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file.


An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \Multi-Touch\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \Bluetooth\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \Security\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted X.509 certificate file.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \Multi-Touch\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \QuickTime\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted media file.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \TextInput\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \CoreGraphics\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the \Projects\ component which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \ImageIO\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.


An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the \FontParser\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file.


An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \IOFireWireAVC\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \SQLite\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SQL statement.


An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file because unrecognized \\ characters cause incorrect 0x00 characters in bytecode.literal data.


An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \Intel Graphics Driver\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \Foundation\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \SQLite\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the \ld64\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \Intel Graphics Driver\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \AppleGraphicsPowerManagement\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the \CoreAudio\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.


An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. iCloud before 7.0 on Windows is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \SQLite\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \libxpc\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \IOAcceleratorFamily\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \Wi-Fi\ component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \IOUSBFamily\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \CoreAnimation\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \IOFireWireFamily\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \WebKit Page Loading\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the \ld64\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \JavaScriptCore\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \Intel Graphics Driver\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \kext tools\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \Bluetooth\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the \Intel Graphics Driver\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the \Wi-Fi\ component. It allows remote attackers to execute arbitrary code (on the Wi-Fi chip) or cause a denial of service (memory corruption) by leveraging proximity for 802.11.


An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the \afclip\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \SQLite\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \IOKit\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the \WebKit Web Inspector\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \Kernel\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the \CFNetwork Session\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the \Wi-Fi\ component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the \AVEVideoEncoder\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the \WebKit\ component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.


An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \Accessibility Framework\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the \NVIDIA Graphics Drivers\ component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted use of the value attribute a different vulnerability than CVE-2015-6685 CVE-2015-6686 CVE-2015-6693 CVE-2015-6694 and CVE-2015-7622.


The display drivers in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 23987307.


WebKit as used in Apple iOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.


mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bugs 24630158 and 23882800 a different vulnerability than CVE-2015-8505 CVE-2015-8506 and CVE-2015-8507.


Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) by using the Format action for unspecified fields a different vulnerability than CVE-2015-6686 CVE-2015-6693 CVE-2015-6694 CVE-2015-6695 and CVE-2015-7622.


The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.


Grand Central Dispatch in Apple iOS before 9.1 OS X before 10.11.1 and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted package that is mishandled during dispatch calls.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6977 CVE-2015-6990 CVE-2015-6991 CVE-2015-6993 CVE-2015-7008 CVE-2015-7009 CVE-2015-7010 and CVE-2015-7018.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6977 CVE-2015-6978 CVE-2015-6990 CVE-2015-6993 CVE-2015-7008 CVE-2015-7009 CVE-2015-7010 and CVE-2015-7018.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6977 CVE-2015-6978 CVE-2015-6991 CVE-2015-6993 CVE-2015-7008 CVE-2015-7009 CVE-2015-7010 and CVE-2015-7018.


CoreText in Apple iOS before 9.1 OS X before 10.11.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6992 and CVE-2015-7017.


Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted use of the fillColor attribute a different vulnerability than CVE-2015-6685 CVE-2015-6686 CVE-2015-6693 CVE-2015-6695 and CVE-2015-7622.


Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted set of fields a different vulnerability than CVE-2015-6685 CVE-2015-6693 CVE-2015-6694 CVE-2015-6695 and CVE-2015-7622.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5575 CVE-2015-5577 CVE-2015-5578 CVE-2015-5580 CVE-2015-5582 and CVE-2015-5588.


CoreText in Apple iOS before 9.1 OS X before 10.11.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6975 and CVE-2015-7017.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6978 CVE-2015-6990 CVE-2015-6991 CVE-2015-6993 CVE-2015-7008 CVE-2015-7009 CVE-2015-7010 and CVE-2015-7018.


The display drivers in Android before 5.1.1 LMY48Z allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bug 24163261.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6977 CVE-2015-6978 CVE-2015-6990 CVE-2015-6991 CVE-2015-6993 CVE-2015-7008 CVE-2015-7009 CVE-2015-7010 and CVE-2015-7018.


Double

free

vulnerability

in

the

function

in

in

OpenJPEG

before

as

used

in

PDFium

in

Google

Chrome

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

by

triggering

a

memory-allocation

failure.


The signatureSetSeedValue method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted arguments a different vulnerability than CVE-2015-6685 CVE-2015-6686 CVE-2015-6694 CVE-2015-6695 and CVE-2015-7622.


mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bugs 19779574 23680780 23876444 and 23658148 a different vulnerability than CVE-2015-8072 and CVE-2015-8073.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6977 CVE-2015-6978 CVE-2015-6990 CVE-2015-6991 CVE-2015-7008 CVE-2015-7009 CVE-2015-7010 and CVE-2015-7018.


Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-7085 CVE-2015-7086 CVE-2015-7087 CVE-2015-7088 CVE-2015-7090 CVE-2015-7091 CVE-2015-7092 and CVE-2015-7117.


The ASN.1 decoder in Apple OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate a different vulnerability than CVE-2015-7059 and CVE-2015-7061.


WebKit as used in Apple iOS before 9.1 Safari before 9.0.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1 APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.


The Apple iWork application before 2.6 for iOS Apple Keynote before 6.6 Apple Pages before 5.6 and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted document.


Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-7085 CVE-2015-7086 CVE-2015-7087 CVE-2015-7088 CVE-2015-7089 CVE-2015-7090 CVE-2015-7092 and CVE-2015-7117.


OpenGL in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2015-7066.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7095 CVE-2015-7096 CVE-2015-7097 CVE-2015-7098 CVE-2015-7099 CVE-2015-7101 CVE-2015-7102 and CVE-2015-7103.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7096 CVE-2015-7097 CVE-2015-7098 CVE-2015-7099 CVE-2015-7100 CVE-2015-7101 CVE-2015-7102 and CVE-2015-7103.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7095 CVE-2015-7096 CVE-2015-7097 CVE-2015-7098 CVE-2015-7100 CVE-2015-7101 CVE-2015-7102 and CVE-2015-7103.


Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13 Acrobat and Acrobat Reader DC Classic before 2015.006.30094 and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-6685 CVE-2015-6686 CVE-2015-6693 CVE-2015-6694 and CVE-2015-6695.


The ASN.1 decoder in Apple OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate a different vulnerability than CVE-2015-7060 and CVE-2015-7061.


CoreMedia Playback in Apple iOS before 9.2 OS X before 10.11.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.


Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-7625 CVE-2015-7627 CVE-2015-7630 CVE-2015-7633 and CVE-2015-7634.


Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-7086 CVE-2015-7087 CVE-2015-7088 CVE-2015-7089 CVE-2015-7090 CVE-2015-7091 CVE-2015-7092 and CVE-2015-7117.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7095 CVE-2015-7096 CVE-2015-7097 CVE-2015-7099 CVE-2015-7100 CVE-2015-7101 CVE-2015-7102 and CVE-2015-7103.


WebKit as used in Apple Safari before 9.0.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.


CoreMedia Playback in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.


The IOHIDFamily API in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2015-7112.


Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-7625 CVE-2015-7626 CVE-2015-7630 CVE-2015-7633 and CVE-2015-7634.


CoreText in Apple iOS before 9.1 OS X before 10.11.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6975 and CVE-2015-6992.


Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-7625 CVE-2015-7626 CVE-2015-7627 CVE-2015-7630 and CVE-2015-7634.


Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-7085 CVE-2015-7086 CVE-2015-7087 CVE-2015-7089 CVE-2015-7090 CVE-2015-7091 CVE-2015-7092 and CVE-2015-7117.


The ASN.1 decoder in Apple OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate a different vulnerability than CVE-2015-7059 and CVE-2015-7060.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7095 CVE-2015-7096 CVE-2015-7097 CVE-2015-7098 CVE-2015-7099 CVE-2015-7100 CVE-2015-7101 CVE-2015-7102 and CVE-2015-7103.


Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-7085 CVE-2015-7086 CVE-2015-7087 CVE-2015-7088 CVE-2015-7089 CVE-2015-7091 CVE-2015-7092 and CVE-2015-7117.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7095 CVE-2015-7096 CVE-2015-7097 CVE-2015-7098 CVE-2015-7099 CVE-2015-7100 CVE-2015-7102 and CVE-2015-7103.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6977 CVE-2015-6978 CVE-2015-6990 CVE-2015-6991 CVE-2015-6993 CVE-2015-7008 CVE-2015-7010 and CVE-2015-7018.


Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake.


Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-7085 CVE-2015-7086 CVE-2015-7087 CVE-2015-7088 CVE-2015-7089 CVE-2015-7090 CVE-2015-7091 and CVE-2015-7092.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-7626 CVE-2015-7627 CVE-2015-7630 CVE-2015-7633 and CVE-2015-7634.


The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.


Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-7085 CVE-2015-7087 CVE-2015-7088 CVE-2015-7089 CVE-2015-7090 CVE-2015-7091 CVE-2015-7092 and CVE-2015-7117.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7095 CVE-2015-7096 CVE-2015-7097 CVE-2015-7098 CVE-2015-7099 CVE-2015-7100 CVE-2015-7101 and CVE-2015-7102.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7095 CVE-2015-7097 CVE-2015-7098 CVE-2015-7099 CVE-2015-7100 CVE-2015-7101 CVE-2015-7102 and CVE-2015-7103.


The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Pages document.


WebKit as used in Apple iOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6977 CVE-2015-6978 CVE-2015-6990 CVE-2015-6991 CVE-2015-6993 CVE-2015-7008 CVE-2015-7009 and CVE-2015-7010.


Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-7625 CVE-2015-7626 CVE-2015-7627 CVE-2015-7633 and CVE-2015-7634.


OpenGL in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2015-7064.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7095 CVE-2015-7096 CVE-2015-7097 CVE-2015-7098 CVE-2015-7099 CVE-2015-7100 CVE-2015-7101 and CVE-2015-7103.


Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux Adobe AIR before 19.0.0.213 Adobe AIR SDK before 19.0.0.213 and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-7625 CVE-2015-7626 CVE-2015-7627 CVE-2015-7630 and CVE-2015-7633.


The ProgramBinary::linkAttributes function in libGLES in ANGLE as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows mishandles shader access which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted (1) OpenGL or (2) WebGL content.


WebKit in Apple iOS before 9.2 Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-7048 CVE-2015-7095 CVE-2015-7096 CVE-2015-7098 CVE-2015-7099 CVE-2015-7100 CVE-2015-7101 CVE-2015-7102 and CVE-2015-7103.


The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request aka SAP Security Note 2197428.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6977 CVE-2015-6978 CVE-2015-6990 CVE-2015-6991 CVE-2015-6993 CVE-2015-7009 CVE-2015-7010 and CVE-2015-7018.


FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-6976 CVE-2015-6977 CVE-2015-6978 CVE-2015-6990 CVE-2015-6991 CVE-2015-6993 CVE-2015-7008 CVE-2015-7009 and CVE-2015-7018.


The IOHIDFamily API in Apple iOS before 9.2 OS X before 10.11.2 tvOS before 9.1 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app a different vulnerability than CVE-2015-7111.


Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-7085 CVE-2015-7086 CVE-2015-7088 CVE-2015-7089 CVE-2015-7090 CVE-2015-7091 CVE-2015-7092 and CVE-2015-7117.


WebKit as used in Apple iOS before 9.1 Safari before 9.0.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1 APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.


WebKit as used in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5544 CVE-2015-5545 CVE-2015-5546 CVE-2015-5547 CVE-2015-5548 CVE-2015-5549 and CVE-2015-5553.


QL Office in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted office document.


ImageIO in Apple iOS before 9.1 OS X before 10.11.1 and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image a different vulnerability than CVE-2015-5935 CVE-2015-5937 and CVE-2015-5939.


CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-5778.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5579.


Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-5785.


Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3095 CVE-2015-5087 CVE-2015-5094 CVE-2015-5102 CVE-2015-5103 CVE-2015-5104 and CVE-2015-5115.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5575 CVE-2015-5577 CVE-2015-5578 CVE-2015-5580 CVE-2015-5588 and CVE-2015-6677.


The CoreGraphics component in Apple iOS before 9.1 OS X before 10.11.1 and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2015-5925.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5544 CVE-2015-5545 CVE-2015-5547 CVE-2015-5548 CVE-2015-5549 CVE-2015-5552 and CVE-2015-5553.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5575 CVE-2015-5578 CVE-2015-5580 CVE-2015-5582 CVE-2015-5588 and CVE-2015-6677.


The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1 when multi-threading is enabled omits certain validation and locking steps which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.


Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3095 CVE-2015-5087 CVE-2015-5094 CVE-2015-5100 CVE-2015-5102 CVE-2015-5103 and CVE-2015-5115.


FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file a different vulnerability than CVE-2015-3804 and CVE-2015-5775.


Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 when the configuration setting \Load printer settings with the document\ is enabled allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via crafted PrinterSetup data in an ODF document.


QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-3765 CVE-2015-3779 CVE-2015-3788 CVE-2015-3789 CVE-2015-3790 CVE-2015-3791 CVE-2015-3792 CVE-2015-5751 and CVE-2015-5779.


WebKit as used in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.


Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3095 CVE-2015-5087 CVE-2015-5100 CVE-2015-5102 CVE-2015-5103 CVE-2015-5104 and CVE-2015-5115.


Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function as exploited in the wild in July 2015.


WebKit as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5544 CVE-2015-5545 CVE-2015-5546 CVE-2015-5548 CVE-2015-5549 CVE-2015-5552 and CVE-2015-5553.


dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5544 CVE-2015-5545 CVE-2015-5546 CVE-2015-5547 CVE-2015-5548 CVE-2015-5549 and CVE-2015-5552.


Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file.


ImageIO in Apple iOS before 9.1 OS X before 10.11.1 and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image a different vulnerability than CVE-2015-5935 CVE-2015-5936 and CVE-2015-5939.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3117 CVE-2015-3123 CVE-2015-3130 CVE-2015-3133 CVE-2015-3134 and CVE-2015-4431.


Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3095 CVE-2015-5087 CVE-2015-5094 CVE-2015-5100 CVE-2015-5102 CVE-2015-5103 and CVE-2015-5104.


QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-3765 CVE-2015-3779 CVE-2015-3788 CVE-2015-3789 CVE-2015-3790 CVE-2015-3791 CVE-2015-3792 CVE-2015-5753 and CVE-2015-5779.


Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3095 CVE-2015-5087 CVE-2015-5094 CVE-2015-5100 CVE-2015-5102 CVE-2015-5104 and CVE-2015-5115.


CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file a different vulnerability than CVE-2015-5777.


The CoreGraphics component in Apple iOS before 9.1 OS X before 10.11.1 and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site a different vulnerability than CVE-2015-5926.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5544 CVE-2015-5546 CVE-2015-5547 CVE-2015-5548 CVE-2015-5549 CVE-2015-5552 and CVE-2015-5553.


ImageIO in Apple iOS before 9.1 OS X before 10.11.1 and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image a different vulnerability than CVE-2015-5935 CVE-2015-5936 and CVE-2015-5937.


WebKit as used in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.


Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X 14.x through 18.0.0.203 on Windows and OS X 11.x through 11.2.202.481 on Linux and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property as exploited in the wild in July 2015.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5575 CVE-2015-5577 CVE-2015-5580 CVE-2015-5582 CVE-2015-5588 and CVE-2015-6677.


ImageIO in Apple iOS before 9.1 OS X before 10.11.1 and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image a different vulnerability than CVE-2015-5936 CVE-2015-5937 and CVE-2015-5939.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5544 CVE-2015-5545 CVE-2015-5546 CVE-2015-5547 CVE-2015-5548 CVE-2015-5552 and CVE-2015-5553.


WebKit as used in Apple iOS before 9.1 Safari before 9.0.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1 APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.


WebKit as used in Apple Safari before 9.0.1 and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.


Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-5786.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5575 CVE-2015-5577 CVE-2015-5578 CVE-2015-5580 CVE-2015-5582 and CVE-2015-6677.


Quartz Composer Framework in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted QuickTime file.


Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X 14.x through 18.0.0.203 on Windows and OS X 11.x through 11.2.202.481 on Linux and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function as exploited in the wild in July 2015.


Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3095 CVE-2015-5094 CVE-2015-5100 CVE-2015-5102 CVE-2015-5103 CVE-2015-5104 and CVE-2015-5115.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5567.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5544 CVE-2015-5545 CVE-2015-5546 CVE-2015-5547 CVE-2015-5549 CVE-2015-5552 and CVE-2015-5553.


FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file a different vulnerability than CVE-2015-3804 and CVE-2015-5756.


Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted series of Unicode characters.


Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12 Acrobat and Acrobat Reader DC Classic before 2015.006.30060 and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3095 CVE-2015-5087 CVE-2015-5094 CVE-2015-5100 CVE-2015-5103 CVE-2015-5104 and CVE-2015-5115.


WebKit as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.


WebKit as used in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.


LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via an index to a non-existent bookmark in a DOC file.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5575 CVE-2015-5577 CVE-2015-5578 CVE-2015-5582 CVE-2015-5588 and CVE-2015-6677.


QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-3765 CVE-2015-3779 CVE-2015-3788 CVE-2015-3789 CVE-2015-3790 CVE-2015-3791 CVE-2015-3792 CVE-2015-5751 and CVE-2015-5753.


The OpenGL implementation in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.


Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux Adobe AIR before 18.0.0.199 Adobe AIR SDK before 18.0.0.199 and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5545 CVE-2015-5546 CVE-2015-5547 CVE-2015-5548 CVE-2015-5549 CVE-2015-5552 and CVE-2015-5553.


Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux Adobe AIR before 19.0.0.190 Adobe AIR SDK before 19.0.0.190 and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-5577 CVE-2015-5578 CVE-2015-5580 CVE-2015-5582 CVE-2015-5588 and CVE-2015-6677.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3117 CVE-2015-3123 CVE-2015-3130 CVE-2015-3133 and CVE-2015-3134.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0314 CVE-2015-0316 CVE-2015-0318 CVE-2015-0329 and CVE-2015-0330.


Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0332 CVE-2015-0333 and CVE-2015-0335.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 37.0 Firefox ESR 31.x before 31.6 and Thunderbird before 31.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0316 CVE-2015-0318 CVE-2015-0321 CVE-2015-0329 and CVE-2015-0330.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0350 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0360 CVE-2015-3038 CVE-2015-3041 CVE-2015-3042 and CVE-2015-3043.


Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0314 CVE-2015-0316 CVE-2015-0321 CVE-2015-0329 and CVE-2015-0330.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0347 CVE-2015-0350 CVE-2015-0352 CVE-2015-0354 CVE-2015-0355 CVE-2015-0360 CVE-2015-3038 CVE-2015-3041 CVE-2015-3042 and CVE-2015-3043.


Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0314 CVE-2015-0316 CVE-2015-0318 CVE-2015-0321 and CVE-2015-0330.


Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0 when a nonstandard memory allocator is used allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted JavaScript code that makes an XMLHttpRequest call with zero bytes of data.


Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0332 CVE-2015-0333 and CVE-2015-0339.


The

Off

Main

Thread

Compositing

(OMTC)

implementation

in

Mozilla

Firefox

before

makes

an

incorrect

memset

call

during

interaction

with

the

mozilla::layers::BufferTextureClient::AllocateForSurface

function

which

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption

and

application

crash)

via

vectors

that

trigger

rendering

of

graphics

content.


Use-after-free

vulnerability

in

the

mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex

function

in

Mozilla

Firefox

before

Firefox

ESR

before

and

Thunderbird

before

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(heap

memory

corruption)

via

crafted

content

that

is

improperly

handled

during

IndexedDB

index

creation.


Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0314 CVE-2015-0316 CVE-2015-0318 CVE-2015-0321 and CVE-2015-0329.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0347 CVE-2015-0350 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0360 CVE-2015-3038 CVE-2015-3041 CVE-2015-3042 and CVE-2015-3043.


Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android Adobe AIR SDK before 16.0.0.272 and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0306.


Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0333 CVE-2015-0335 and CVE-2015-0339.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0347 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0360 CVE-2015-3038 CVE-2015-3041 CVE-2015-3042 and CVE-2015-3043.


The LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors aka SPR KLYH9SLRGM.


The

Off

Main

Thread

Compositing

(OMTC)

implementation

in

Mozilla

Firefox

before

attempts

to

use

memset

for

a

memory

region

of

negative

length

during

interaction

with

the

function

which

allows

remote

attackers

to

execute

arbitrary

code

or

cause

a

denial

of

service

(memory

corruption)

via

vectors

that

trigger

rendering

of

graphics

content.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0347 CVE-2015-0350 CVE-2015-0352 CVE-2015-0353 CVE-2015-0355 CVE-2015-0360 CVE-2015-3038 CVE-2015-3041 CVE-2015-3042 and CVE-2015-3043.


Use-after-free vulnerability in the AppendElements function in Mozilla Firefox before 37.0 Firefox ESR 31.x before 31.6 and Thunderbird before 31.6 on Linux when the Fluendo MP3 plugin for GStreamer is used allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted MP3 file.


Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0314 CVE-2015-0318 CVE-2015-0321 CVE-2015-0329 and CVE-2015-0330.


Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0332 CVE-2015-0335 and CVE-2015-0339.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0347 CVE-2015-0350 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-3038 CVE-2015-3041 CVE-2015-3042 and CVE-2015-3043.


Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 Firefox ESR 31.x before 31.5 and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.


Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android Adobe AIR SDK before 16.0.0.272 and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0303.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0347 CVE-2015-0350 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0360 CVE-2015-3038 CVE-2015-3041 CVE-2015-3042 and CVE-2015-3043.


WebKit as used in Apple Safari before 6.2.4 7.x before 7.1.4 and 8.x before 8.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.


WebKit as used in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and APPLE-SA-2015-04-08-4.


WebKit as used in Apple Safari before 6.2.6 7.x before 7.1.6 and 8.x before 8.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-1152 and CVE-2015-1153.


WebKit as used in Apple iOS before 8.3 Apple TV before 7.2 and Apple Safari before 6.2.5 7.x before 7.1.5 and 8.x before 8.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1 APPLE-SA-2015-04-08-3 and APPLE-SA-2015-04-08-4.


WebKit as used in Apple Safari before 6.2.6 7.x before 7.1.6 and 8.x before 8.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-1153 and CVE-2015-1154.


The Google V8 engine as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1 allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.


WebKit as used in Apple Safari before 6.2.6 7.x before 7.1.6 and 8.x before 8.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than CVE-2015-1152 and CVE-2015-1154.


The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file aka internal bugs 23335715 23307276 and 23286323.


QT Media Foundation in Apple QuickTime before 7.7.7 as used in OS X before 10.10.4 and other products allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file a different vulnerability than CVE-2015-3661 CVE-2015-3663 CVE-2015-3666 CVE-2015-3667 and CVE-2015-3668.


WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8 7.x before 7.1.8 and 8.x before 8.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.


The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes which allows remote attackers to execute arbitrary code or cause a denial of service (integer underflow and memory corruption) via crafted MPEG-4 covr atoms aka internal bug 20923261.


Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-9161 CVE-2015-3046 CVE-2015-3049 CVE-2015-3050 CVE-2015-3051 CVE-2015-3056 CVE-2015-3057 CVE-2015-3070 and CVE-2015-3076.


QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-3765 CVE-2015-3779 CVE-2015-3788 CVE-2015-3789 CVE-2015-3790 CVE-2015-3792 CVE-2015-5751 CVE-2015-5753 and CVE-2015-5779.


QT Media Foundation in Apple QuickTime before 7.7.7 as used in OS X before 10.10.4 and other products allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file a different vulnerability than CVE-2015-3661 CVE-2015-3662 CVE-2015-3663 CVE-2015-3667 and CVE-2015-3668.


QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-3765 CVE-2015-3779 CVE-2015-3788 CVE-2015-3790 CVE-2015-3791 CVE-2015-3792 CVE-2015-5751 CVE-2015-5753 and CVE-2015-5779.


Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-9161 CVE-2015-3046 CVE-2015-3049 CVE-2015-3050 CVE-2015-3051 CVE-2015-3052 CVE-2015-3057 CVE-2015-3070 and CVE-2015-3076.


The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0347 CVE-2015-0350 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0360 CVE-2015-3041 CVE-2015-3042 and CVE-2015-3043.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3123 CVE-2015-3130 CVE-2015-3133 CVE-2015-3134 and CVE-2015-4431.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-0347 CVE-2015-0350 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0360 CVE-2015-3038 CVE-2015-3041 and CVE-2015-3043.


Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-9161 CVE-2015-3049 CVE-2015-3050 CVE-2015-3051 CVE-2015-3052 CVE-2015-3056 CVE-2015-3057 CVE-2015-3070 and CVE-2015-3076.


CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file a different vulnerability than CVE-2015-3685 CVE-2015-3686 CVE-2015-3688 and CVE-2015-3689.


Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file a different vulnerability than CVE-2015-3679 CVE-2015-3680 and CVE-2015-3681.


Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors as exploited in the wild in April 2015 a different vulnerability than CVE-2015-0347 CVE-2015-0350 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0360 CVE-2015-3038 CVE-2015-3041 and CVE-2015-3042.


Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux Adobe AIR before 18.0.0.180 Adobe AIR SDK before 18.0.0.180 and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3117 CVE-2015-3130 CVE-2015-3133 CVE-2015-3134 and CVE-2015-4431.


The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression a different vulnerability than CVE-2015-3796 and CVE-2015-3797.


Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.


Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2014-9161 CVE-2015-3046 CVE-2015-3049 CVE-2015-3050 CVE-2015-3051 CVE-2015-3052 CVE-2015-3056 CVE-2015-3057 and CVE-2015-3070.


CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file a different vulnerability than CVE-2015-3685 CVE-2015-3687 CVE-2015-3688 and CVE-2015-3689.


WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8 7.x before 7.1.8 and 8.x before 8.0.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.


Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux Adobe AIR before 17.0.0.172 Adobe AIR SDK before 17.0.0.172 and Adobe AIR SDK & Compiler before 17.0.0.172 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors a different vulnerability than CVE-2015-3078 CVE-2015-3089 and CVE-2015-3090.


QT Media Foundation in Apple QuickTime before 7.7.7 as used in OS X before 10.10.4 and other products allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file a different vulnerability than CVE-2015-3661 CVE-2015-3662 CVE-2015-3666 CVE-2015-3667 and CVE-2015-3668.


The Speech UI in Apple OS X before 10.10.5 when speech alerts are enabled allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Unicode string.


QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-3779 CVE-2015-3788 CVE-2015-3789 CVE-2015-3790 CVE-2015-3791 CVE-2015-3792 CVE-2015-5751 CVE-2015-5753 and CVE-2015-5779.


QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file a different vulnerability than CVE-2015-3765 CVE-2015-3788 CVE-2015-3789 CVE-2015-3790 CVE-2015-3791 CVE-2015-3792 CVE-2015-5751 CVE-2015-5753 and CVE-2015-5779.