CVE-2013-0967: Undefined Security Weakness

CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attackers to bypass a Java plug-in disabled setting, and trigger the launch of Java Web Start applications, via a crafted web site...

CVE-2013-0969: Undefined Security Weakness

Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard...

CVE-2013-0970: Undefined Security Weakness

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

CVE-2013-0976: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted graphics image...

PT-2013-2764

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.3 Description The issue is related to a use-after-free vulnerability in PDFKit, allowing remote attackers to execute arbitrary code or cause a denial of service, such as an application crash, via crafted i...

Mac OS X 10.8.x < 10.8.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.3. The newer version contains multiple security-related fixes for the following components : - Apache - CoreTypes - International Components for Unicode - Identity Services - ImageIO - IOAcceleratorFamily - Kernel - Log...

Mac OS X : Apple Safari < 6.0.3 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.3. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

Mac OS X : Safari < 6.0.3 Multiple Vulnerabilities

Binary data 800999.prm...

PT-2013-2763

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.3 Description The issue allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL. This could potentially lead to unauthorized access to the device's camera and...

CVE-2013-0973: Undefined Security Weakness

Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream...

CVE-2013-0966: Undefined Security Weakness

The Apple modhfsapple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI...

CVE-2013-0971: Undefined Security Weakness

Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted ink annotations in a PDF document...

PT-2013-2768

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted graphics image. This is related to the IOAcceleratorFamily...

PT-2013-2765

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions through 10.7.5 Description The issue concerns a software update in Apple Mac OS X that fails to prevent plugin loading within the marketing-text WebView. This allows man-in-the-middle attackers to execute plugin code by...

PT-2013-2760

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.3 Description The issue allows remote attackers to bypass a Java plug-in disabled setting and trigger the launch of Java Web Start applications via a crafted web site, because JNLP files are included in th...

PT-2013-2762

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.3 Description The issue allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes. This is possible due to the Login Window not preventing application...

Mac OS X Multiple Vulnerabilities (Security Update 2013-001)

The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2013-001 applied. This update contains numerous security-related fixes for the following components : - Apache - CoreTypes 10.7 only - International Components for Unicode - Identity Services 10.7 onl...

Google Chrome 21.0.1180.57 NULL Pointer

---| overview Vulnerability: Chrome Null Pointer in InspectDataSource::StartDataRequest Date: 03/14/2012 Author: @HeyderAndrade heyder.andradeatgmaildotcom Chrome Version: = 21.0.1180.57 stable Operating System Tested: Win XP SP2, WIN7, Mac OS X 10.6.8 10K549,Linux Ubuntu 12.04 Architecture: x86...

Heap overflow

Heap-based buffer overflow in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adobe...

CVE-2013-0650

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.68 and 11.x before 11.6.602.180 on Windows and Mac OS X, before 10.3.183.68 and 11.x before 11.2.202.275 on Linux, before 11.1.111.44 on Android 2.x and 3.x, and before 11.1.115.48 on Android 4.x; Adobe AIR before 3.6.0.6090; Adob...