377 matches found
Memory corruption
Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption...
CVE-2007-0197
Affected product: Apple Mac OS X Finder on Mac OS X 10.4.8. Vulnerable component: DMG disk image volume name handling in Finder. Root cause: memory corruption due to a long DMG volume name (buffer/bounds issue). Impact: remote attackers could cause denial of service and possibly arbitrary code ex...
CVE-2007-0197
Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption...
DMA[2007-0109a] - 'Apple Finder Disk Image Volume Label Overflow / DoS'
DMA2007-0109a - 'Apple Finder Disk Image Volume Label Overflow / DoS' Author: Kevin Finisterre Vendors: http://www.apple.com Product: '= OSX 10.4 ?' References: http://www.digitalmunition.com/DMA2007-0109a.txt http://www.apple.com/macosx/features/finder/...
CVE-2006-6062
Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service crash via a malformed UDTO HFS+ disk image, such as with "bad sectors," which triggers memory corruption...
CVE-2006-6062
CVE-2006-6062 affects Apple Mac OS X 10.4.8 (and possibly newer/other builds) and is triggered by processing malformed UDTO HFS+ disk images, which can cause memory corruption and a remote denial-of-service (crash). Public sources describe this as a vulnerability in handling corrupted UDTO HFS+ i...
CVE-2006-6062
Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service crash via a malformed UDTO HFS+ disk image, such as with "bad sectors," which triggers memory corruption...
Apple Mac OSX 10.4.8 - UDTO Disk Image Remote Denial of Service
source: https://www.securityfocus.com/bid/21236/info Apple Mac OS X is prone to a remote denial-of-service vulnerability when handling specially crafted UDTO disk image files. Successfully exploiting this issue allows remote users to crash affected computers, denying service to legitimate users...
Apple Mac OSX 10.4.8 - UDIF Disk Image Remote Denial of Service
Apple Mac OSX 10.4.8 - UDIF Disk Image Remote Denial of Service source: https://www.securityfocus.com/bid/21201/info Apple Mac OS X is prone to a remote denial-of-service vulnerability when handling specially crafted UDIF disk image files. Successfully exploiting this issue allows remote users to...
Apple Mac OSX 10.4.8 - UDIF Disk Image Remote Denial of Service
source: https://www.securityfocus.com/bid/21201/info Apple Mac OS X is prone to a remote denial-of-service vulnerability when handling specially crafted UDIF disk image files. Successfully exploiting this issue allows remote users to crash affected computers, denying service to legitimate users...
MacOS multiple browsers unauthorized local files access
By using AppleWebKit XMLHttpRequest it's possible to mount disk image with HTML documents to known location...
CVE-2002-1266
Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."...
CVE-2002-1266
CVE-2002-1266 affects Mac OS X 10.2.2 and describes a local privilege elevation where a user can gain privileges by mounting a disk image file created on another system. The provided documents do not specify the underlying root cause details, affected components, or any remediation steps. No expl...
CVE-2004-0485
The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file .dmg to be mounted as a disk volume...
CVE-2004-0485
CVE-2004-0485 concerns the default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8. The underlying issue allows a remote attacker to cause a disk image file (.dmg) to be mounted as a disk volume, enabling writing of arbitrary files. The description in the connected records confirm...