CVE-2012-0651

CVE-2012-0651 affects Apple Mac OS X 10.6.8 Directory Service server. A remote attacker can obtain sensitive information from process memory by sending a crafted message. Base score 5.0 (Medium) per NVD. Remediation is an Apple security update; vendor guidance and patch references are present in ...

CVE-2012-0651

The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a crafted message...

CVE-2012-0662

Integer overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted input...

CVE-2012-0657

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

CVE-2012-0657

Technical details about CVE-2012-0657 are not provided in the connected documents. The initial description mentions OS X before 10.7.4 RSS Visualizer and screen-lock bypass, but no explicit affected versions beyond that are specified in the supplied sources.

CVE-2012-0659

CVE-2012-0659 describes an integer overflow in Apple QuickTime’s MPEG stream padding calculation that can be triggered by a crafted MPEG file to cause a heap buffer overflow and remote code execution. Affected: Apple QuickTime on macOS (OS X), with fixes in updates (e.g., OS X 10.7.4 and related ...

CVE-2012-0649

Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users to gain privileges via vectors involving a temporary file...

CVE-2012-0649

The CVE-2012-0649 entry concerns a race condition in the initialization routine of blued (Bluetooth) in Apple Mac OS X prior to 10.7.4. This vulnerability can allow local users to gain privileges via a temporary-file vector. The issue is categorized as a local-exploit path with medium severity (C...

PT-2012-2765

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via crafted audio sample tables in a movie file. This can be achieved by progressively downloading a...

CVE-2012-0651: Exposure of Sensitive Information to an Unauthorized Actor

The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a crafted message...

PT-2012-2760

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.7.3 Description The issue concerns the Login Window in Apple Mac OS X. When Legacy File Vault or networked home directories are enabled, it does not properly restrict what is written to the system log for network...

PT-2012-2767

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.4 Description A buffer underflow issue in QuickTime allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MPEG file. Recommendations For versions prior to 10.7.4,...

PT-2012-2757

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.4 Description A race condition exists in the initialization routine in blued in Bluetooth in Apple Mac OS X, allowing local users to gain privileges via vectors involving a temporary file. Recommendations...

PT-2012-2769

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.4 Description The issue is related to an integer overflow in the Security Framework, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

PT-2012-2781

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.4 Description The issue concerns the Time Machine feature in Mac OS X, where it fails to maintain SRP-based authentication after initial use, allowing remote attackers to access Time Capsule credentials by...

PT-2012-2763

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7.x through 10.7.3 Description A race condition exists in the LoginUIFramework of Apple Mac OS X, allowing physically proximate attackers to login to arbitrary accounts by entering the account name and no password wh...

CVE-2012-0662: Undefined Security Weakness

Integer overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted input...

PT-2012-2759

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.6.8 Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted message, specifically targeting the directory server in Directory Service. Recommendations For Apple...

PT-2012-2766

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.4 Description The issue is related to an integer overflow in QuickTime, which can be triggered by a crafted MPEG file. This can lead to the execution of arbitrary code or cause a denial of service, resulti...

CVE-2012-0656: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers to login to arbitrary accounts by entering the account name and no password...