CVE-2011-3503

Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRSUT.dll that is located in the same folder as a .quo QUOTE file. NOTE: th...

Apple Mac OS X Keychain证书设置安全限制绕过漏洞

BUGTRAQ ID: 49429 Mac OS X是苹果麦金塔Macintosh电脑之操作系统软件的总称。 Mac OS X在Keychain证书的设置上存在安全限制绕过漏洞，远程攻击者可利用此漏洞通过中间人攻击绕过Keychain安全设置。 即使用户已经把Keychain Access中的根CA信任设置标注为“Never Trust”，Mac OS X操作系统也会接受Extended Validation证书为有效。 Apple Mac OS X 10.6.x Apple MacOS X Server 10.6.x 厂商补丁： Apple -----...

Apple Mac OS X PackageKit Format String Vulnerability

This host is missing an important security update according to Mac OS X 10.6.6 Update. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-0419

Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...

CVE-2011-0194

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...

Memory corruption

QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via an Excel spreadsheet with a crafted formula that uses unspecified opcodes...

Design/Logic Flaw

AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service divide-by-zero error and reboot via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162...

CVE-2011-0184

QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via an Excel spreadsheet with a crafted formula that uses unspecified opcodes...

CVE-2011-0172

CVE-2011-0172 affects AirPort in Mac OS X 10.6 up to 10.6.6. The issue is a divide-by-zero in the handling of Wi‑Fi frames over a local wireless network, allowing a remote attacker on the same network to trigger a denial of service and system reboot. The vulnerability is tied to the Mac OS X 10.6...

About the security content of Safari 5.0.4

About the security content of Safari 5.0.4 Last Modified: March 09, 2011 Article: HT4566 Email this article Print this page Summary This document describes the security content of Safari 5.0.4. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until...

Mac OS X 10.6 < 10.6.6 Multiple Vulnerabilities

Binary data 800785.prm...

CVE-2010-3822

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets CSS counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service...

Code injection

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets CSS counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service...

Design/Logic Flaw

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JP2 file...

Integer overflow

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

Heap overflow

Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted xar archive...

CVE-2010-3797

CVE-2010-3797: XSS in Wiki Server for Mac OS X Server (10.5.8 and 10.6.x prior to 10.6.5). A remote authenticated user can inject arbitrary script/HTML via wiki page editing. The issue is mitigated by applying the Mac OS X 10.6.5 Security Update (Security Update 2010-007) which includes input val...

CVE-2010-3792

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG movie file...

CVE-2010-3798

Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted xar archive...

CVE-2010-3788

This CVE (CVE-2010-3788) affects Apple QuickTime on Mac OS X 10.6.x prior to 10.6.5. The issue is an uninitialized memory access in the processing of JP2 images, which can allow a remote attacker to cause arbitrary code execution or a denial of service by crafted JP2 files. According to the provi...