Moab

The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted HTTP 301 response. This is due to a NULL pointer dereference in the CFNetConnectionWillEnqueueRequests function.

The issue is related to a heap-based buffer overflow in the SFTP protocol handler. This allows remote attackers to execute arbitrary code via a long ftps:// URL.

Name of the Vulnerable Software and Affected Versions: Colloquy versions 2.1 and earlier Description: The issue is related to multiple format string vulnerabilities in the ` invitedToRoom:` and ` invitedToDirectChat:` functions. These vulnerabilities can be exploited by remote attackers who send INVITE requests with format string specifiers in the channel name, potentially causing a denial of service (application crash) and possibly allowing the execution of arbitrary code. This is related to the implementation of `AlertSheet` and `AlertPanel` in Apple AppKit. Recommendations: For Colloquy versions 2.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

A double free vulnerability in the ATPsndrsp function allows remote attackers to cause a denial of service (kernel panic) and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow.

The issue allows remote attackers to cause a denial of service, resulting in an application crash, or execute arbitrary code. This is achieved through the use of format string specifiers in the Javascript `alert` function.

A buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a long `rtsp://` URI. The `rtsp://` handler fails to validate a supplied URL string, resulting in a stack overflow. With a specially crafted URL, an attacker can cause arbitrary code execution, leading to a loss of integrity.