381 matches found
CVE-2010-1379
Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service printing failure by deploying a printing device that has a Unicode character in its printing-service name...
CVE-2010-1376
Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...
CVE-2010-1380
Integer overflow in the cgtexttops CUPS filter in Printing in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to page sizes...
Format string
Multiple format string vulnerabilities in Network Authorization in Apple Mac OS X 10.6 before 10.6.4 allow remote attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 afp, 2 cifs, or 3 smb URL...
Cross site scripting
Cross-site scripting XSS vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page...
Cross site scripting
Cross-site scripting XSS vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content."...
Code injection
Printer Setup in Apple Mac OS X 10.6 before 10.6.4 does not properly interpret character encoding, which allows remote attackers to cause a denial of service printing failure by deploying a printing device that has a Unicode character in its printing-service name...
Open redirect
Open Directory in Apple Mac OS X 10.6 before 10.6.4 creates an unencrypted connection upon certain SSL failures, which allows man-in-the-middle attackers to spoof arbitrary network account servers, and possibly execute arbitrary code, via unspecified vectors...
CVE-2010-0541
CVE-2010-0541 : A cross-site scripting (XSS) vulnerability in the WEBrick HTTP server of Ruby on Apple Mac OS X 10.5.8 and 10.6 before 10.6.4 allows remote attackers to inject arbitrary script/HTML via a crafted URI that triggers a UTF-7 error page. The connected documents confirm the existence a...
CVE-2010-0541
Cross-site scripting XSS vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page...
CVE-2010-1376
CVE-2010-1376 involves multiple format string vulnerabilities in Apple Mac OS X 10.6’s Network Authorization. According to the connected sources, the flaw resides in how format string specifiers are processed for AFP/CIFS/SMB URLs, potentially allowing a remote attacker to execute arbitrary code ...
CVE-2010-1373
CVE-2010-1373 : Apple Mac OS X 10.6 before 10.6.4 contains a cross-site scripting (XSS) vulnerability in Help Viewer. A crafted help: URL can inject arbitrary web script or HTML due to issues with URL parameters in HTML content, enabling remote HTML/script injection. Affected component: Help View...
CVE-2010-0540
Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...
CVE-2010-1373
Cross-site scripting XSS vulnerability in Help Viewer in Apple Mac OS X 10.6 before 10.6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted help: URL, related to "URL parameters in HTML content."...
CVE-2010-1377
CVE-2010-1377 affects Apple Mac OS X 10.6 before 10.6.4. Open Directory may create an unencrypted connection during certain SSL failures, enabling MITM spoofing of network account servers and possibly arbitrary code execution via unspecified vectors. Root cause is an unencrypted fallback during S...
CVE-2010-1382
The CVE-2010-1382 issue affects Apple Mac OS X Wiki Server: specifically OS X 10.5.8 and 10.6 before 10.6.4. The root cause is a lack of a charset field in Wiki content, enabling a cross-site scripting (XSS) vector. Impact stated: remote authenticated users can inject arbitrary web script or HTML...
CVE-2010-1415
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle libxml contexts, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document, related to an "API...
CVE-2010-1417
The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via HTML content th...
CVE-2010-1395
Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors involving DOM constructor objects, related to a "scope management issu...
