Memory corruption

Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption and system crash by attaching a USB device...

Xxe

Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote attackers to determine passwords via unspecified access to a mobile account...

CVE-2012-3719

Mail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows remote attackers to execute arbitrary plugin code via an e-mail message that triggers the loading of a third-party plugin...

CVE-2012-0650

Buffer overflow in the DirectoryService Proxy in DirectoryService in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2012-3718

CVE-2012-3718 affects Mac OS X: versions prior to 10.7.5 and 10.8.x prior to 10.8.2. A local attacker can read passwords entered at Login Window or Screen Saver Unlock by installing an input method that intercepts keystrokes. Root cause: input-method keystroke interception at login/unlock. Impact...

CVE-2012-3720

CVE-2012-3720 (Apple macOS) affects the Mobile Accounts feature. In affected builds (OS X before 10.7.5 and 10.8.x before 10.8.2), a password hash was saved for external-account use even when external accounts were not enabled, potentially letting a remote attacker determine a user password via a...

CVE-2012-3722

CVE-2012-3722 concerns an uninitialized memory access in the Sorenson codec used by QuickTime on macOS (before 10.7.5) and CoreMedia on iOS (before 6). The flaw allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Sorenson-encoded movie file. References ind...

CVE-2012-3716

CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write or read via a crafted text glyph...

CVE-2012-0650

Apple Mac OS X CVE-2012-0650 is a DirectoryService Proxy buffer overflow vulnerability. The ZDI advisory describes an unchecked objOffset in SwapProxyMessage used by DirectoryService, causing memory corruption and enabling remote code execution with no authentication; the vulnerable service liste...

CVE-2012-3716

CVE-2012-3716 : In Apple Mac OS X, the vulnerability affects OS X 10.7.x before 10.7.5 where CoreText mishandles text glyphs due to a bounds checking issue, enabling remote arbitrary code execution or a denial of service via out-of-bounds reads/writes. The published Apple advisory (APPLE-SA-2012-...

CVE-2012-3718

Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window aka LoginWindow or Screen Saver Unlock by installing an input method that intercepts keystrokes...

CVE-2012-3723

Apple Mac OS X prior to 10.7.5 is affected by CVE-2012-3723 due to improper handling of the bNbrPorts field in USB hub descriptors. This memory corruption vulnerability allows physically proximate attackers to run arbitrary code or cause a denial of service by attaching a USB device. Fix: update ...

CVE-2012-3721

Profile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the Device Management private interface, which allows attackers to enumerate managed devices via unspecified vectors...

CVE-2012-3723

Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption and system crash by attaching a USB device...

CVE-2012-3719

CVE-2012-3719 affects Apple Mail on Mac OS X prior to 10.7.5, where an input-validation issue in handling embedded web plugins can allow a remote attacker to cause arbitrary plugin code execution via a crafted email that triggers loading of a third-party plugin. The active public details consolid...

CVE-2012-3721

CVE-2012-3721 affects Apple OS X Profile Manager. The vulnerability is an authentication issue in the Device Management private interface, allowing an unauthenticated user to enumerate managed devices via unspecified vectors. The issue is addressed by removing the Device Management private interf...

Mac OS X : Safari < 6.0.1 Multiple Vulnerabilities

Binary data 800990.prm...

PT-2012-4958

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.5 Apple Mac OS X version 10.8.x prior to 10.8.2 Description The issue allows local users to read passwords entered into Login Window or Screen Saver Unlock by installing an input method that intercepts...

PT-2012-4961

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.5 Description The issue concerns improper authentication for the Device Management private interface in Profile Manager. This allows attackers to enumerate managed devices. Recommendations For versions pri...

CVE-2012-0650: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the DirectoryService Proxy in DirectoryService in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...