Design/Logic Flaw

The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...

CVE-2007-6359

The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...

CVE-2007-6359

CVE-2007-6359 affects the Apple XNU kernel (bsd/kern/ubc_subr.c) in Mac OS X 10.5.1 and earlier. A local user can trigger a null pointer dereference in the kernel’s handling of code signatures in cs_validate_page, allowing a crafted signed Mach-O binary to cause a denial of service (failed assert...

CVE-2007-6261

CVE-2007-6261 affects Apple Mac OS X (xnu kernel) 10.4–10.5.1. The vulnerability is an integer overflow in the load_threadstack function of mach_loader.c, enabling a local attacker to trigger a denial of service (infinite loop) through a crafted Mach-O binary. Connected documents do not provide e...

CVE-2007-4686

Integer signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to cause a denial of service system shutdown or gain privileges via a crafted TIOCSETD ioctl request...

CVE-2007-4686

The CVE-2007-4686 issue affects Apple Mac OS X xnu kernel (tty.c) on 10.4–10.4.10. A crafted TIOCSETD ioctl can take advantage of a signedness/overflow flaw in ttioctl, allowing a local attacker to cause a system crash or gain kernel privileges by abusing the line-discipline switch in ttioctl. Th...