bugtraq - Apple iOS / OSX Foundation NSXMLParser XML eXternal Entity (XXE) Flaw

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <D4B0B1D9-F4C8-405E-8ED5-649F6E25C88B@vsecurity.com>
Date: Thu, 18 Sep 2014 01:07:23 -0400
From: VSR Advisories <advisories@...curity.com>
To: bugtraq@...urityfocus.com
Subject: Apple iOS / OSX Foundation NSXMLParser XML eXternal Entity (XXE) Flaw

hope that it will help promote public safety.  This advisory comes with
absolutely NO WARRANTY; not even the implied warranty of merchantability or
fitness for a particular purpose.  Neither Virtual Security Research, LLC nor
the author accepts any liability for any direct, indirect, or consequential
loss or damage arising from use of, or reliance on, this information.

See the VSR disclosure policy for more information on our responsible
disclosure practices:
  http://www.vsecurity.com/company/disclosure

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
     Copyright 2014 Virtual Security Research, LLC.  All rights reserved.

Download attachment "signature.asc" of type "application/pgp-signature" (802 bytes)