13 matches found
Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit
Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include extern booleant excservermachmsgheadert , machmsgheade...
CVE-2006-3509
Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service crash or execute arbitrary code in third-party wireless software that uses the API via crafted frames...
CVE-2006-3509
CVE-2006-3509 describes an integer overflow in the AirPort wireless driver’s API for third‑party software on Mac OS X v10.4.7 (and related updates). The underlying issue is an overflow that could lead to a buffer overflow in applications using the API, with attackers in near proximity able to tri...
CVE-2006-3506
Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified vectors related to "processing a path name."...
Buffer overflow
Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Canon RAW image...
CVE-2006-3500
The dynamic linker dyld in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability...
CVE-2006-0392
CVE-2006-0392 describes a buffer overflow in Apple Mac OS X 10.4.7's ImageIO framework when processing Canon RAW images. An attacker could entice a user to view a crafted Canon RAW file, potentially causing an application crash or arbitrary code execution with user privileges. Affected products i...
CVE-2006-3504
The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari...
CVE-2006-3503
Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a malformed GIF image...
CVE-2006-3504
CVE-2006-3504 affects Apple Mac OS X 10.4.7 where LaunchServices’ Download Validation can misclassify HTML as “safe.” If Safari’s “Open ‘safe’ files after downloading” is enabled, a downloaded HTML file could auto-open in a local context and allow embedded JavaScript to bypass local access restri...
CVE-2006-0393
OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang...
CVE-2006-3501
Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Radiance image...
Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit
No description provided by source. !/bin/sh http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Previously undisclosed local fetchmail issue. This takes setgid=6 http://docs.info.apple.com/article.html?artnum=106704 export PATH=/tmp:$PATH echo /bin/sh -i /tmp/uname chmod +...