CVE-2007-6448

CVE-2007-6448 is rejected/not used; duplicate of CVE-2007-6120.

CVE-2007-6443

CVE-2007-6443 is rejected; refer to CVE-2007-6115 instead; this entry is not active.

CVE-2007-6446

CVE-2007-6446 is a duplicate of CVE-2007-6118 and not an active entry.

CVE-2007-6441

CVE-2007-6441 : The WiMAX dissector in Wireshark (Ethereal) 0.99.6 is affected. The issue enables a remote attacker to crash the application (denial of service) from malformed or crafted packets due to an unaligned access condition on certain platforms. The connected advisories indicate affected ...

CVE-2007-6450

The CVE-2007-6450 issue affects Wireshark (Ethereal) 0.9.8–0.99.6, where the RPL dissector can be abused by remote attackers to trigger an infinite loop, causing a denial of service. Several Nessus/CentOS/Oracle/MiracleLinux advisories confirm this vulnerability and reference Wireshark 0.99.7 as ...

CVE-2007-6437

Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service crash via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference...

CVE-2007-5848

Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service...

CVE-2007-5849

Integer underflow in the asn1getstring function in the SNMP back end backend/snmp.c for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow...

CVE-2007-5858

Affected software: WebKit/Safari on Mac OS X 10.4.11 and 10.5.1, iPhone 1.0–1.1.2, and iPod touch 1.1–1.1.2. Issue: remote attackers can navigate the subframes of other pages, enabling cross-site scripting (XSS) and potential information disclosure. Root cause: the vulnerability allows subframe n...

CVE-2007-5861

CVE-2007-5861 describes an unspecified vulnerability in Spotlight for Mac OS X 10.4.11 where a crafted .XLS file triggers memory corruption in the Microsoft Office Spotlight Importer, allowing user-assisted denial of service or arbitrary code execution. Affected: Mac OS X 10.4.11 with Spotlight i...

CVE-2007-5847

CVE-2007-5847 is a race condition in the CFURLWriteDataAndPropertiesToResource API within Core Foundation on Mac OS X 10.4.11. The flaw causes created files to inherit insecure permissions, potentially allowing local users to access sensitive information. The vulnerability affects Mac OS X 10.4.1...

CVE-2007-5850

CVE-2007-5850 describes a heap-based buffer overflow in Desktop Services of Apple Mac OS X 10.4.11 that allows user-assisted attackers to execute arbitrary code via a directory containing a crafted .DS_Store file. The NVD entry confirms a high base score (8.8) with the impact to confidentiality a...

CVE-2007-5856

CVE-2007-5856 affects Apple Mac OS X up to version 10.5.1 in Quick Look: when previewing HTML, plug-ins can initiate network requests, potentially leaking sensitive information. The NVD entry cites a CVSSv2 base score of 9.4 (HIGH) with network attack vector and no user interaction. OpenVAS refer...

CVE-2007-5859

Affected software: Safari RSS in Mac OS X 10.4.11. Vulnerability: memory corruption in handling feed: URLs that may allow remote attackers to terminate the application or execute arbitrary code. The issue is documented in CVE-2007-5859 and is noted across multiple sources; exploitation involves c...

CVE-2007-5860

CVE-2007-5860 affects Apple Mac OS X 10.5.1 (Spin Tracer). The vulnerability is described as an unspecified local condition that allows an attacker with local access to execute arbitrary code via insecure file operations on output files. This is confirmed by multiple sources in the connected set,...

CVE-2007-5863

CVE-2007-5863 concerns Apple OS X Software Update (10.5.1) where a MITM between client and server, using a modified distribution definition file with the “allow-external-scripts” option, allows remote command execution. Public sources in the connected set corroborate an Apple OS X Software Update...

CVE-2007-5851

CVE-2007-5851 affects Apple Mac OS X 10.4.11's iChat. The issue allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors. The OpenVAS/NVD entries reference Mac OS X Security Update 2007-009 as a remediation path, but the provided do...

CVE-2007-5853

CVE-2007-5853 affects Apple Mac OS X 10.4.11 in the IO Storage Family. A user-assisted path via a disk image with crafted GUID partition maps can trigger memory corruption, enabling either a denial of service (system shutdown) or arbitrary code execution. The issue relates to IO Storage Family an...

CVE-2007-4710

CVE-2007-4710 describes an unspecified vulnerability in ColorSync for Apple Mac OS X 10.4.11 that can be triggered by processing an image with a crafted ColorSync profile, leading to memory corruption and allowing either denial of service or remote code execution. The issue affects ColorSync in O...

CVE-2007-6437

CVE-2007-6437 affects Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8. It allows a remote attacker to cause a crash (denial of service) via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference. The vulnerability is mitigated by u...