CVE-2006-1984

CVE-2006-1984 describes an unspecified vulnerability in the Mac OS X TIFF handling path. The issue is located in the internal function _cg_TIFFSetField used by applications leveraging ImageIO or AppKit, affecting Mac OS X 10.4.6 and earlier. A crafted TIFF image can trigger a null dereference, al...

CVE-2006-1983

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 PredictorVSetField function for TIFF or 2 CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit...

CVE-2006-1982: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images...

CVE-2006-1983: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 PredictorVSetField function for TIFF or 2 CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit...

CVE-2006-1984: Undefined Security Weakness

Unspecified vulnerability in the cgTIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKit, allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers a null dereference...

Multiple MacOS X vulnerabilities

Apple Mac OS X Directory Services contains a buffer overflow, Apple Mac OS X Server servermgrd authentication vulnerable to buffer overflow, Apple Mac OS X AppKit vulnerable to buffer overflow via the handling of maliciously crafted rich text files, Apple Mac OS X AppKit vulnerable to buffer...

CVE-2005-2502

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file...

CVE-2005-2502

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file...

CVE-2005-2503

AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window...

CVE-2005-2501

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format RTF file...

CVE-2005-2501

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format RTF file...

CVE-2005-2503

AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window...

CVE-2005-2502

CVE-2005-2502 is a buffer overflow in Apple’s Mac OS X AppKit that handles Microsoft Word files. The vulnerability affects AppKit-based applications (e.g., TextEdit) on Mac OS X 10.3.9 and 10.4.2 and could allow an attacker to execute arbitrary code via a crafted Word document. The root cause is ...

CVE-2005-2501

CVE-2005-2501 : A buffer overflow in Apple Mac OS X’s AppKit (handling of rich text, .rtf) could allow a remote attacker to execute arbitrary code on vulnerable systems. Affected: Mac OS X 10.3.9 and 10.4.2 (and apps using AppKit such as TextEdit). Root cause: overflow in AppKit’s RTF handling. I...

CVE-2005-2503

Affected software: AppKit on Mac OS X 10.3.9 and 10.4.2. Vulnerability: allows attackers with physical access to create local accounts by forcing a specific error at the login window. Impact/conditions: local access; described CVSS as local, with partial confidentiality, integrity, and availabili...

CVE-2005-2502: Undefined Security Weakness

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file...

CVE-2005-2501: Undefined Security Weakness

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format RTF file...

CVE-2005-2503: Undefined Security Weakness

AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window...

Mac OS X Multiple Vulnerabilities (Security Update 2005-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2005-007 applied. This security update contains fixes for the following products : - Apache 2 - AppKit - Bluetooth - CoreFoundation - CUPS - Directory Services - HItoolbox - Kerberos - loginwindow -...

Apple Mac OS X AppKit vulnerable to buffer overflow via the handling of maliciously crafted rich text files

Overview A buffer overflow vulnerability exists in a component of Apple's Mac OS X operating system that handles rich text files. Description The Cocoa Application Framework also referred to as the Application Kit, or AppKit is one of the core Cocoa frameworks supplied with Apple's Mac OS X...