Race condition

Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers to login to arbitrary accounts by entering the account name and no password...

Design/Logic Flaw

libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by conducting a spoofing or network-sniffing attack during communication with a site th...

Directory traversal

The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a crafted message...

Design/Logic Flaw

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

Buffer overflow

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted audio sample tables in a movie file that is progressively downloaded...

CVE-2012-0661

Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with JPEG2000 encoding...

CVE-2012-0658

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted audio sample tables in a movie file that is progressively downloaded...

CVE-2012-0652

CVE-2012-0652 is an Apple OS X local vulnerability where Login Window could log password-related data to the system log when Legacy FileVault or network home directories were enabled. The issue arises from insufficient protection of login information in logs. Apple released fixes in Security Upda...

CVE-2012-0654

CVE-2012-0654 affects Apple Mac OS X prior to 10.7.4, where libsecurity during X.509 certificate processing can access uninitialized memory, allowing remote code execution or a denial-of-service (application crash). The vulnerability is addressed by Apple’s Security Update (HT5281) mentioned in t...

CVE-2012-0661

CVE-2012-0661 affects Apple QuickTime on Mac OS X. The flaw is a use-after-free in the handling of JPEG2000-encoded movie samples (stsz atom) that allows remote code execution or a crash when processing a crafted file. The specific vulnerability arises when the sample size is too large and memory...

CVE-2012-0656

CVE-2012-0656 describes a race condition in Apple's LoginUIFramework on Mac OS X 10.7.x before 10.7.4. When the Guest account is enabled, physically proximate attackers could log into arbitrary accounts by entering an account name with no password. Affected: Mac OS X 10.7.x prior to 10.7.4; root ...

CVE-2012-0656

Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers to login to arbitrary accounts by entering the account name and no password...

CVE-2012-0675

CVE-2012-0675 affects Apple Mac OS X Time Machine prior to 10.7.4, where SRP-based authentication is not required to continue after first use, enabling remote reading of Time Capsule credentials via spoofed backup volumes. The issue is tied to the Time Machine authentication flow (SRP) and its im...

CVE-2012-0662

CVE-2012-0662 : Integer overflow in the Security Framework of Apple Mac OS X prior to 10.7.4 enables remote attackers to execute arbitrary code or cause a denial of service via crafted input. The vulnerability is documented in NVD with a base score of 7.5 (HIGH) and a network attack vector with n...

CVE-2012-0660

Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG file...

CVE-2012-0660

CVE-2012-0660: Apple QuickTime on Mac OS X pre-10.7.4 is affected by a buffer underflow in MPEG file handling, which can lead to remote arbitrary code execution or a crash. The vulnerability is in QuickTime and is documented with a MEDIUM risk (NVD base score 6.8). The connected documents provide...

CVE-2012-0658

CVE-2012-0658 is a QuickTime flaw in Mac OS X prior to 10.7.4 where a buffer overflow in QuickTime’s handling of audio sample tables during progressive download could allow remote code execution or cause an application crash. The underlying issue is a buffer overflow in the movie file processing ...

CVE-2012-0655

libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by conducting a spoofing or network-sniffing attack during communication with a site th...

CVE-2012-0655

CVE-2012-0655 : Affects Apple Mac OS X before 10.7.4, where the libsecurity component does not properly constrain RSA key lengths in X.509 certificates. This allows remote attackers to defeat cryptographic protection by conducting a spoofing or network-sniffing attack when communicating with a si...

CVE-2012-0651

CVE-2012-0651 affects Apple Mac OS X 10.6.8 Directory Service server. A remote attacker can obtain sensitive information from process memory by sending a crafted message. Base score 5.0 (Medium) per NVD. Remediation is an Apple security update; vendor guidance and patch references are present in ...