PT-2012-4959

Name of the Vulnerable Software and Affected Versions Mail in Apple Mac OS X versions prior to 10.7.5 Description The issue is related to how Mail in Apple Mac OS X handles embedded web plugins. It allows remote attackers to execute arbitrary plugin code via an e-mail message that triggers the...

CVE-2012-3723: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption and system crash by attaching a USB device...

CVE-2012-3716: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write or read via a crafted text glyph...

CVE-2012-3719: Improper Input Validation

Mail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows remote attackers to execute arbitrary plugin code via an e-mail message that triggers the loading of a third-party plugin...

CVE-2012-3718: Exposure of Sensitive Information to an Unauthorized Actor

Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window aka LoginWindow or Screen Saver Unlock by installing an input method that intercepts keystrokes...

CVE-2012-3720: Undefined Security Weakness

Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote attackers to determine passwords via unspecified access to a mobile account...

PT-2012-4960

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.5 Mac OS X versions 10.8.x prior to 10.8.2 Description The issue allows remote attackers to potentially determine passwords via unspecified access to a mobile account, as password hashes for external-account use...

PT-2012-4957

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7.x through 10.7.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted text glyph. This is related to an out-of-bounds write or read in CoreText...

PT-2012-4963

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.5 Description The issue arises from improper handling of the bNbrPorts field of a USB hub descriptor. This allows physically proximate attackers to execute arbitrary code or cause a denial of service, resulting ...

CVE-2012-3721: Improper Authentication

Profile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the Device Management private interface, which allows attackers to enumerate managed devices via unspecified vectors...

Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components : - Apache - BIND - CoreText - Data Security - ImageIO - Installer - International Components for Unicode - Kernel - Mail - PHP ...

Mac OS X 10.8.x < 10.8.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.2. The newer version contains multiple security-related fixes for the following components : - BIND - Data Security - LoginWindow - Mobile Accounts - PHP %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mac OS X Multiple Vulnerabilities (Security Update 2012-004) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-004 applied. This update contains multiple security-related fixes for the following components : - Apache - Data Security - DirectoryService - ImageIO - International Components for Unicode - Mail - PHP ...

PT-2012-2758

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. This is related to a buffer overflow in the DirectoryService Proxy in...

Mac OS X : Java for OS X 2012-005

The remote Mac OS X 10.7 or 10.8 host is running a version of Java for Mac OS X that is missing update 2012-005, which updates the Java version to 1.6.035. As such, it potentially contains two methods that do not properly restrict access to information about other classes. Specifically, the...

Mac OS X : Java for Mac OS X 10.6 Update 10

The remote Mac OS X host is running a version of Java for Mac OS X 10.6 that is missing Update 10, which updates the Java version to 1.6.035. As such, it potentially contains two methods that do not properly restrict access to information about other classes. Specifically, the 'getField' and...

Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities (Mac OS X)

This host is installed with Adobe Photoshop and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobephotoshoppngimagefilebofvulnmacosx.nasl 5931 2017-04-11 09:02:04Z teissa $ Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities Mac OS X Authors:...

Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities - Mac OS X

Adobe Photoshop is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:photoshopcs6";...

Google Chrome < 21.0.1180.89 Multiple Vulnerabilities (Sep 2012) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities - Sep12 (Mac OS X)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12macosx.nasl 5888 2017-04-07 09:01:53Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Mac OS X Authors: Antu Sanadi Copyright: Copyright c 2012...