CVE-2011-3214: Undefined Security Weakness

IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors...

PT-2011-4307

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue concerns the IOGraphics component in Apple Mac OS X, which fails to properly handle a locked-screen state when an Apple Cinema Display is in display sleep mode. This allows an...

PT-2011-4313

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file, due to improper processing of URL data handlers in movie files by...

PT-2011-2208

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.2 Description The issue is related to a synchronization problem in CFNetwork, which does not properly follow the intended cookie-storage policy. This makes it easier for remote web servers to track users via a...

Mozilla Products Same Origin Policy Bypass Vulnerability (MAC OS X)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to same origin policy bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtssecbypassvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products Same Origin Policy Bypass Vulnerability MAC OS X...

PT-2011-4458

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7 through 10.7.1 Description The issue allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation, as the Open Directory does not require the current password to b...

PT-2011-4305

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.7 before 10.7.2 Description The issue allows physically proximate attackers to obtain sensitive information by reading directly from the disk device, due to incomplete encryption of disk data during the enabling of...

PT-2011-4317

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions through 10.6.8 Description The issue concerns the User Documentation component in Apple Mac OS X, which uses http sessions for updates to App Store help information. This allows man-in-the-middle attackers to execute...

PT-2011-4319

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7 through 10.7.1 Description The issue allows remote attackers to bypass the password requirement for user accounts when an LDAPv3 server is used with RFC 2307 or custom mappings. This is due to the lack of an...

PT-2011-4321

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted movie file. Recommendations For...

PT-2011-4318

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue concerns the SMB File Server component, which fails to restrict access to the share point record of a guest-restricted folder for all guest users. This allows remote attackers to...

PT-2011-4315

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FlashPix file. This is related to a buffer overflow in QuickTime. Recommendations For...

PT-2011-4311

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions through 10.6.8 Description The issue allows man-in-the-middle attackers to conduct cross-site scripting XSS attacks. This occurs when the "Save for Web" selection in QuickTime Player exports HTML documents containing an...

PT-2011-4309

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.2 Description The issue is related to the kernel's implementation of the sticky bit for directories. This might allow local users to bypass intended permissions and delete files using an unlink system call...

PT-2011-4308

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.2 Description The issue allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in certain states, including the loginwindow, boot, or shutdow...

PT-2011-4459

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.7 before 10.7.2 Description The issue is related to an integer signedness error in Apple Type Services ATS that allows remote attackers to execute arbitrary code. This can be achieved by providing a crafted embedded...

PT-2011-2202

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted QuickTime movie file. Recommendations For Apple Mac OS X versio...

PT-2011-2206

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.9 Description The issue is related to the handling of embedded Type 1 fonts in Apple Type Services ATS, allowing remote attackers to execute arbitrary code via a crafted document. This is due to an...

PT-2011-2234

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.7.2 Description The issue allows physically proximate attackers to bypass intended access restrictions by typing into a system window when the screen is locked, due to the CoreProcesses component not...

CVE-2011-0185: Use of Externally-Controlled Format String

Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file...