Memory corruption

QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted idsc atom in a QuickTime movie file...

CVE-2013-1025

Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JBIG2 data in a PDF document...

CVE-2013-1026

Buffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JPEG2000 data in a PDF document...

CVE-2013-1027

Installer in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation after encountering a revoked certificate, which might allow user-assisted remote attackers to execute arbitrary code via a crafted package...

CVE-2013-1028

The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate...

CVE-2013-1031

Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had prevented the startup o...

CVE-2013-1033

Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access...

CVE-2013-1025

CVE-2013-1025 describes a CoreGraphics JBIG2 buffer overflow in macOS OS X before 10.8.5 that could allow remote code execution or a denial of service via crafted JBIG2 data in PDF files. Connected sources confirm the issue as a PDF JBIG2 processing vulnerability in CoreGraphics; OS X Mountain Li...

CVE-2013-1027

CVE-2013-1027 affects Apple Mac OS X Installer prior to 10.8.5. The installer allowed a user to continue after a revoked certificate, which could enable a user‑assisted remote attacker to execute arbitrary code via a crafted package. The issue was addressed by Apple in Mountain Lion 10.8.5 / Secu...

CVE-2013-1031

Apple Mac OS X CVE-2013-1031 describes a local power-management vulnerability where a power assertion could bypass screen-lock protections due to improper locking. Affected product: OS X prior to 10.8.5. Root cause: locking not properly engaged on power-assert events, allowing physically proximat...

CVE-2013-1033

Apple Mac OS X before 10.8.5 contains a vulnerability in Screen Lock where session tracking for screen-sharing sessions is incomplete, allowing remote authenticated users to bypass the lock when another user is logged in. Impacted component: Screen Lock. Root cause: inadequate session-tracking du...

CVE-2013-1030

Apple OS X before 10.8.5: mdmclient in Mobile Device Management places a password on the command line, allowing local users to read the password by listing the process. CVE-2013-1030. Apple issued HT5880 and OS X Mountain Lion v10.8.5 / Security Update 2013-004 to address this, through a fixed pi...

CVE-2013-1032

CVE-2013-1032 affects Apple QuickTime on Mac OS X (before 10.8.5). The issue is a memory corruption vulnerability in the processing of the QuickTime atom ‘idsc’ within movie files, which can enable remote code execution or cause a denial of service when a crafted file is opened. Several sources c...

CVE-2013-1032

QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted idsc atom in a QuickTime movie file...

CVE-2013-1028

Apple Mac OS X before 10.8.5 is affected by CVE-2013-1028 in its IPSec implementation when Hybrid Auth is used: X.509 certificates from security gateways are not verified, enabling MITM attackers to spoof gateways and exfiltrate data via crafted certificates. The OpenVAS/NVD entries confirm the i...

CVE-2013-1029

The kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service panic via crafted IGMP packets that leverage incorrect, extraneous code in the IGMP parser...

CVE-2013-1026

CVE-2013-1026 is a buffer overflow in ImageIO on OS X before 10.8.5, triggered by JPEG2000 data in PDFs. This could allow remote code execution or cause a denial of service (crash). Apple released OS X 10.8.5 (Mountain Lion) security update to fix the issue.

CVE-2013-1029

CVE-2013-1029 affects Apple Mac OS X kernel prior to 10.8.5. The issue arises from an incorrect, extraneous code path in the IGMP parser that, when processing crafted IGMP packets, can trigger a kernel panic and thus a denial of service. The vulnerability is exploitable remotely via IGMP traffic....

Apple Mac OS X本地安全绕过漏洞(CVE-2013-1031)

BUGTRAQ ID: 62374 CVECAN ID: CVE-2013-1031 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4存在电源声明锁问题，屏保程序可能不会在指定时间段后启动。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁: HT5880：About the security content of OS X Mountain Lion v10.8.5 and Security...

Apple Mac OS X PDF文件缓冲区溢出漏洞(CVE-2013-1025)

BUGTRAQ ID: 62368 CVECAN ID: CVE-2013-1025 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4在处理PDF文件内JBIG2编码的数据时存在缓冲区溢出漏洞，远程攻击者通过特制的PDF文件，利用此漏洞可造成应用终止或执行任意代码。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁: HT5880：About the security content of OS ...