CVE-2011-3462: Undefined Security Weakness

Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803...

CVE-2011-3453: Undefined Security Weakness

Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash via crafted DNS data...

CVE-2011-3463: Improper Authentication

WebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication, which allows local users to gain privileges by leveraging access to 1 the server or 2 a bound directory...

CVE-2011-3457: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language aka GLSL compilation, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted program...

CVE-2011-3449: Undefined Security Weakness

Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded font in a document...

PT-2012-1700

Name of the Vulnerable Software and Affected Versions CoreUI in Apple Mac OS X versions 10.7.x through 10.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to improper restriction of stack memory allocation. This can be achieved via a lon...

PT-2012-1698

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with H.264 encoding. Recommendations For...

PT-2012-1701

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 Description The issue concerns Internet Sharing in Apple Mac OS X, where the Wi-Fi configuration is not preserved across software updates. This allows remote attackers to obtain sensitive information by...

Apple Mac OS X CoreText embedded font vulnerability

Overview Apple Mac OS X CoreText contains a use-after-free vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple Mac OS X CoreText is a text layout and font processing engine that is used to handle embedded fonts.CoreTe...

Apple Mac OS X ATS data-font memory corruption vulnerability

Overview Apple Mac OS X ATS contains a memory corruption vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple Mac OS X ATS Apple Type Services fails to properly handle malformed data-font .dfont files, resulting in...

CVE-2011-3447: Exposure of Sensitive Information to an Unauthorized Actor

CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL...

CVE-2011-3446: Undefined Security Weakness

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

CVE-2011-3452: Exposure of Sensitive Information to an Unauthorized Actor

Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password for a Wi-Fi network...

CVE-2011-3459: Undefined Security Weakness

Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted rdrf atom in a movie file that triggers a buffer overflow...

CVE-2011-3460: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PNG file...

PT-2012-1697

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7.x through 10.7.2 Description The issue allows remote attackers to obtain sensitive information via a malformed URL, due to improper construction of request headers during URL parsing. Recommendations For Apple Mac ...

PT-2012-1696

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 Description The issue is related to the improper management of memory for data-font files by Apple Type Services ATS in Apple Mac OS X. This can be exploited by remote attackers to execute arbitrary code...

PT-2012-1695

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.3 Description The issue allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network, due to the Address Book automatically switching to unencrypted sessions...

PT-2012-1706

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PNG file. This is related to a buffer overflow in QuickTime. Recommendations For version...

PT-2012-1704

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.3 QuickTime versions prior to the version in 10.7.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MP4 file, due to the failure to preven...