Design/Logic Flaw

Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document file, as demonstrated by opening the document with TextEdit...

CVE-2008-1028

Unspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document file, as demonstrated by opening the document with TextEdit...

CVE-2008-1028

CVE-2008-1028 affects Apple Mac OS X through the AppKit component prior to 10.5. The vulnerability arises in processing crafted document files (e.g., opened with TextEdit) and may lead to arbitrary code execution or an application crash under user-assisted conditions. Apple’s Security Update 2008...

About the security content of Security Update 2008-003 / Mac OS X 10.5.3

About the security content of Security Update 2008-003 / Mac OS X 10.5.3 Last Modified: May 28, 2008 Article: HT1897 Summary This document describes the security content of Security Update 2008-003 / Mac OS X 10.5.3, which can be downloaded and installed via Software Update preferences, or from...

Apple Mac OS X 2008-003更新修复多个安全漏洞

BUGTRAQ ID: 29412 CVECAN ID: CVE-2008-1027,CVE-2008-1028,CVE-2008-1577,CVE-2008-1575,CVE-2008-1580,CVE-2008-1030,CVE-2008-1031,CVE-2008-1032,CVE-2008-1033,CVE-2008-1034,CVE-2008-1035,CVE-2008-1036,CVE-2008-1571,CVE-2008-1572,CVE-2008-1573,CVE-2008-1574,CVE-2008-1576,CVE-2008-1578,CVE-2008-1579 Ma...

Stack overflow

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via the a long file name to the NSDocument API...

CVE-2008-0057

Multiple integer overflows in a "legacy serialization format" parser in AppKit in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via a crafted serialized property list...

Code injection

AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications...

CVE-2008-0997

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted PostScript Printer Description PPD file that is not properly handled when querying a network printer...

CVE-2008-0048

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via the a long file name to the NSDocument API...

CVE-2008-0049

AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications...

Stack overflow

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted PostScript Printer Description PPD file that is not properly handled when querying a network printer...

CVE-2008-0048

Apple Mac OS X 10.4.11 is affected by CVE-2008-0048: a stack-based overflow in AppKit’s NSDocument API when handling long file names, allowing context-dependent attackers to potentially execute arbitrary code. Connected sources indicate Apple released security updates (2008-002) addressing multip...

CVE-2008-0057

The CVE describes multiple integer overflows in the legacy serialization format parser of AppKit on Apple Mac OS X 10.4.11, allowing remote attackers to execute arbitrary code via a crafted serialized property list. The provided sources confirm the affected component (AppKit) and version (Mac OS ...

CVE-2008-0997

CVE-2008-0997 : A stack-based buffer overflow in AppKit on Apple Mac OS X 10.4.11 can be exploited by a crafted PostScript Printer Description (PPD) file when querying a network printer, enabling a user-assisted remote attacker to terminate the application or execute arbitrary code. Affected soft...

CVE-2008-0049

AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications...

CVE-2008-0048

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via the a long file name to the NSDocument API...

CVE-2008-0049

CVE-2008-0049 affects Apple Mac OS X 10.4.11: NSApplication’s mach port is exposed for inter-process communication, enabling local users to run arbitrary code in privileged applications via crafted messages. The connected sources indicate a patch—Apple Security Update 2008-002 (SecUpd2008-002) is...

CVE-2008-0997

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted PostScript Printer Description PPD file that is not properly handled when querying a network printer...

Format string

Format string vulnerability in Apple Safari 2.0.4 419.3 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in filenames that are not properly handled when calling the 1 NSLog and 2 NSBeginAlertSheet Apple AppKit functions...