PT-2012-2768

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7.x through 10.7.3 Description The issue is related to a use-after-free vulnerability in QuickTime, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with...

CVE-2012-0655: Undefined Security Weakness

libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by conducting a spoofing or network-sniffing attack during communication with a site th...

CVE-2012-0654: Improper Restriction of Operations within the Bounds of a Memory Buffer

libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted certificate...

CVE-2012-0652: Exposure of Sensitive Information to an Unauthorized Actor

Login Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are enabled, does not properly restrict what is written to the system log for network logins, which allows local users to obtain sensitive information by reading the log...

CVE-2012-0660: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG file...

CVE-2012-0659: Undefined Security Weakness

Integer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MPEG file...

CVE-2012-0649: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users to gain privileges via vectors involving a temporary file...

PT-2012-2761

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted X.509 certificate, due to libsecurity accessing uninitialized memory locations during...

CVE-2012-0675: Improper Authentication

Time Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based authentication after this authentication method is first used, which allows remote attackers to read Time Capsule credentials by spoofing the backup volume...

CVE-2012-0661: Undefined Security Weakness

Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with JPEG2000 encoding...

PT-2012-2763

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7.x through 10.7.3 Description A race condition exists in the LoginUIFramework of Apple Mac OS X, allowing physically proximate attackers to login to arbitrary accounts by entering the account name and no password wh...

PT-2012-2769

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.4 Description The issue is related to an integer overflow in the Security Framework, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

CVE-2012-0658: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted audio sample tables in a movie file that is progressively downloaded...

Apple Security Update Blocks Old Flash Versions

Apple released security updates yesterday that fix various vulnerabilities in Mac OS X and the Safari browser. According to a report written by Gregg Keizer on IT World, the patches resolve four security vulnerabilities and block outdated versions of Adobe Flash Player. Keizer notes that these ar...

Apple Mac OS X filevault information leakage

Encrypted file system password is written in cleartext to log file...

Mac OS X : Apple Safari < 5.1.7 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.1.7. It is, therefore, potentially affected by several issues : - Two unspecified errors exist that can allow malicious sites to perform cross-site scripting attacks. CVE-2011-3046, CVE-2011-3056 - An unspecified...

Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.4. The newer version contains numerous security-related fixes for the following components : - Login Window - Bluetooth - curl - HFS - Kernel - libarchive - libsecurity - libxml - LoginUIFramework - PHP - Quartz Compose...

Mac OS X Multiple Vulnerabilities (Security Update 2012-002) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-002 applied. This update contains multiple security-related fixes for the following components : - curl - Directory Service - ImageIO - libarchive - libsecurity - libxml - Quartz Composer - QuickTime -...

Microsoft Office Remote Code Execution Vulnerabilities-2663830 (Mac OS X)

This host is missing a critical security update according to Microsoft Bulletin MS12-030. OpenVAS Vulnerability Test $Id: secpodms12-030macosx.nasl 5963 2017-04-18 09:02:14Z teissa $ Microsoft Office Remote Code Execution Vulnerabilities-2663830 Mac OS X Authors: Antu Sanadi Copyright: Copyright ...

Microsoft Office Word Remote Code Execution Vulnerability-2680352 (Mac OS X)

This host is missing a critical security update according to Microsoft Bulletin MS12-029. OpenVAS Vulnerability Test $Id: secpodms12-029macosx.nasl 5950 2017-04-13 09:02:06Z teissa $ Microsoft Office Word Remote Code Execution Vulnerability-2680352 Mac OS X Authors: Antu Sanadi Copyright: Copyrig...