CVE-2011-0213

Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG file...

CVE-2011-0201

CVE-2011-0201: Off-by-one buffer overflow in Apple's CoreFoundation CFString handling affects Mac OS X 10.6 and earlier versions; resolves with Mac OS X 10.6.8 update. The issue allows context-dependent attackers to cause an application crash or execute arbitrary code.

CVE-2011-0197

App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow local users to obtain sensitive information by reading a log file, as demonstrated by a log file that has non-default permissions...

CVE-2011-0202

CVE-2011-0202 involves an integer overflow in CoreGraphics on Mac OS X pre-10.6.8 when processing a crafted embedded Type 1 font in a PDF, allowing remote arbitrary code execution or a denial of service. The vulnerability is addressed by Mac OS X 10.6.8 (and related security updates); the cited r...

CVE-2011-0206

Buffer overflow in International Components for Unicode ICU in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service application crash via vectors involving uppercase strings...

CVE-2011-0204

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image...

Apple Issues Huge Security Update, Releases OS X 10.6.8

Apple has released a massive set of security updates for Mac OS X and a number of other applications, fixing a total of 39 separate vulnerabilities in programs including QuickTime, MobileMe and others. The company also released OS X 10.6.8. One of the more serious bugs that Apple fixed with the...

Apple Releases Security Updates to Address Multiple Vulnerabilities

Apple has released Mac OS X 10.6.8 and Security Update 2011-004 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, disclose sensitive information, or cause a denial-of-service condition. US-CERT encourages users and administrators to review...

CVE-2011-0209: Integer Overflow or Wraparound

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted RIFF WAV file...

Firefox Installed (Mac OS X)

Mozilla Firefox is installed on the remote Mac OS X host. TRUSTED...

Mac OS X 10.6.x < 10.6.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.8. This update contains security-related fixes for the following components : - App Store - ATS - Certificate Trust Policy - CoreFoundation - CoreGraphics - FTP Server - ImageIO - International Components for Unicode -...

Adobe Reader Installed (Mac OS X)

Adobe Reader, a PDF file viewer, is installed on the remote Mac OS X host. TRUSTED...

PT-2011-2185

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.8 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code or cause an application crash via a crafted JPEG2000 image. Recommendations For versions prior to...

PT-2011-2181

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue is related to an off-by-one error in the CoreFoundation framework, which can be exploited by context-dependent attackers to execute arbitrary code or cause a denial of service,...

CVE-2011-0211: Integer Overflow or Wraparound

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

CVE-2011-0201: Undefined Security Weakness

Off-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service application crash via a CFString object that triggers a buffer overflow...

CVE-2011-0200: Undefined Security Weakness

Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an image containing a crafted embedded ColorSync profile that triggers a heap-based buffer overflow...

Mac OS X Multiple Vulnerabilities (Security Update 2011-004)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-004 applied. This update contains security- related fixes for the following components : - AirPort - App Store - ColorSync - CoreGraphics - ImageIO - Libsystem - libxslt - MySQL - patch - Samba -...

CVE-2011-0208: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Microsoft Office document...

CVE-2011-1132: Undefined Security Weakness

The IPv6 implementation in the kernel in Apple Mac OS X before 10.6.8 allows local users to cause a denial of service NULL pointer dereference and reboot via vectors involving socket options...