CVE-2011-3436: Undefined Security Weakness

Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation...

CVE-2011-3217: Improper Restriction of Operations within the Bounds of a Memory Buffer

MediaKit in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted disk image...

CVE-2011-3212: Undefined Security Weakness

CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device...

CVE-2011-3435: Undefined Security Weakness

Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors...

CVE-2011-0260: Undefined Security Weakness

The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystrokes in the locked-screen state, which might allow physically proximate attackers to bypass intended access restrictions by typing into this window...

CVE-2011-3215: Undefined Security Weakness

The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the 1 loginwindow, 2 boot, or 3 shutdown state...

CVE-2011-3216: Undefined Security Weakness

The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allow local users to bypass intended permissions and delete files via an unlink system call...

CVE-2011-3242: Exposure of Sensitive Information to an Unauthorized Actor

The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie...

CVE-2011-3223: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FLIC movie file...

CVE-2011-0230: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ATSFontDeactivate API in Apple Type Services ATS in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2011-3224: Undefined Security Weakness

The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server...

CVE-2011-3437: Undefined Security Weakness

Integer signedness error in Apple Type Services ATS in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document...

CVE-2011-3227: Improper Input Validation

libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extension in a Certificate Revocation list CRL, which allows remote attackers to execute arbitrary code or cause a denial of service application crash a crafted 1 web site or 2 e-mail...

CVE-2011-3226: Undefined Security Weakness

Open Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307 or custom mappings, allows remote attackers to bypass the password requirement by leveraging lack of an AuthenticationAuthority attribute for a user account...

CVE-2011-3218: Improper Neutralization of Input During Web Page Generation

The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks by spoofing the http server during local viewing of an exported...

CVE-2011-0229: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple Type Services ATS in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access...

CVE-2011-3220: Exposure of Sensitive Information to an Unauthorized Actor

QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...

CVE-2011-0231: Exposure of Sensitive Information to an Unauthorized Actor

CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."...

CVE-2011-3213: Undefined Security Weakness

The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate fo...

CVE-2011-3230: Undefined Security Weakness

Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site...