CVE-2011-3213

The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate fo...

CVE-2011-3216

The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allow local users to bypass intended permissions and delete files via an unlink system call...

CVE-2011-3226

CVE-2011-3226 affects Mac OS X 10.7 prior to 10.7.2 when bound to an LDAPv3 server using RFC 2307 or custom mappings. A missing AuthenticationAuthority attribute can allow an LDAP user to log in without a password, bypassing credential checks. Impact: potential unauthorized access. Remediation: a...

CVE-2011-3216

CVE-2011-3216 concerns a kernel logic flaw in Apple Mac OS X prior to 10.7.2. The issue stems from improper handling of the sticky bit on directories, which could allow a local user to bypass intended permissions and delete files via an unlink system call. The vulnerability’sImpact is described a...

CVE-2011-3218

CVE-2011-3218 affects Apple QuickTime (Mac OS X up to 10.6.8). The vulnerability is in QuickTime Player’s Save for Web export, where exported HTML documents can reference an HTTP script file. An attacker controlling a local or networked environment could spoof the HTTP server during local viewing...

CVE-2011-3246

CVE-2011-3246 affects CFNetwork in Apple iOS (pre-5.0.1) and Mac OS X (pre-10.7.2). The flaw is improper URL parsing, enabling a crafted (http/https) URL to trigger visits to unintended origins and leak cookies. Connected sources confirm the vulnerability is tied to CFNetwork URL handling and is ...

CVE-2011-0224

CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted QuickTime movie file...

CVE-2011-3222

The CVE refers to a buffer overflow in Apple QuickTime for OS X prior to 10.7.2, triggered by a crafted FlashPix file. A remote attacker could execute arbitrary code or cause an application crash. Affected product: Apple QuickTime on macOS X versions earlier than 10.7.2 (OS X Lion). Underlying ca...

CVE-2011-3436

Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation...

CVE-2011-3220

CVE-2011-3220 affects Apple QuickTime. The flaw is an uninitialized memory access in how QuickTime handles URL data handlers within movie files, allowing remote attackers to read memory contents via a crafted file. The issue is tied to QuickTime's atom data handling and can lead to memory disclos...

CVE-2011-3224

CVE-2011-3224 affects the Apple Mac OS X User Documentation component up to version 10.6.8. The vulnerability arises because App Store help information could be updated over HTTP sessions, allowing a man-in-the-middle attacker spoofing the HTTP server to execute arbitrary code. The impact is limi...

CVE-2011-0224

CVE-2011-0224 affects Apple Mac OS X up to 10.6.8, due to memory corruption in CoreMedia/QuickTime when handling crafted movie files. This can allow remote arbitrary code execution or a denial of service. The issue is addressed by Apple’s security updates (Security Update 2011-006; OS X 10.7.2 an...

CVE-2011-3212

CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device...

CVE-2011-0260

CVE-2011-0260 affects the CoreProcesses component in Mac OS X 10.7 prior to 10.7.2 . The issue allowed a window on the locked screen to receive keystrokes, potentially enabling a physically proximate attacker to bypass screen-lock restrictions. Apple addresses this by preventing system windows fr...

CVE-2011-3246

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...

CVE-2011-3230

Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2011-3224

The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server...

CVE-2011-3225

The SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest users from accessing the share point record of a guest-restricted folder, which allows remote attackers to bypass intended browsing restrictions by leveraging access to the nobody account...

CVE-2011-3437

Integer signedness error in Apple Type Services ATS in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document...

CVE-2011-0230

The CVE-2011-0230 entry describes a buffer overflow in the ATSFontDeactivate API of Apple Type Services (ATS) on macOS X prior to 10.7.2. This could allow remote code execution or cause a denial of service (app crash). Public details in the connected docs indicate the issue is addressed by updati...