8 matches found
Integer overflow
Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file...
CVE-2007-3744
Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...
Heap overflow
Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...
CVE-2007-2405
CVE-2007-2405 describes an integer underflow in Preview (PDFKit) on Mac OS X 10.4.10 that can be triggered by a crafted PDF file to achieve remote code execution. The affected component is Preview/PDFKit in Mac OS X’s PDF handling. The CVSS metrics indicate network access, no authentication, and ...
CVE-2007-2410: Undefined Security Weakness
WebCore on Apple Mac OS X 10.3.9 and 10.4.10 retains properties of certain global objects when a new URL is visited in the same window, which allows remote attackers to conduct cross-site scripting XSS attacks...
CVE-2007-3744: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...
CVE-2007-2405: Undefined Security Weakness
Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file...
CVE-2007-2406: Undefined Security Weakness
Quartz Composer on Apple Mac OS X 10.4.10 does not initialize a certain object pointer, which might allow user-assisted remote attackers to execute arbitrary code via a crafted Quartz Composer file...