CVE-2011-0201: Undefined Security Weakness

Off-by-one error in the CoreFoundation framework in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service application crash via a CFString object that triggers a buffer overflow...

CVE-2011-0206: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in International Components for Unicode ICU in Apple Mac OS X before 10.6.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service application crash via vectors involving uppercase strings...

CVE-2011-0200: Undefined Security Weakness

Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an image containing a crafted embedded ColorSync profile that triggers a heap-based buffer overflow...

CVE-2011-0204: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image...

CVE-2011-0212: Undefined Security Weakness

servermgrd in Apple Mac OS X before 10.6.8 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML-RPC request containing an entity declaration in conjunction with an entity reference,...

CVE-2011-0205: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG2000 image...

CVE-2011-0199: Improper Certificate Validation

The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation EV certificates that lack OCSP URLs, which might allow man-in-the-middle attackers to spoof an SSL server via a revoked certificate...

CVE-2011-0213: Buffer Copy without Checking Size of Input

Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG file...

CVE-2011-0202: Undefined Security Weakness

Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded Type 1 font in a PDF document...

PT-2011-2183

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue allows remote attackers to list arbitrary directories by using the root directory as the starting point of a recursive listing. This is due to an absolute path traversal vulnerabili...

PT-2011-2186

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue allows context-dependent attackers to execute arbitrary code or cause a denial of service, specifically an application crash, via vectors involving uppercase strings. This is due to...

PT-2011-2192

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML-RPC request...

PT-2011-2182

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue is related to an integer overflow in CoreGraphics, which can be triggered by a crafted embedded Type 1 font in a PDF document. This can allow remote attackers to execute arbitrary...

PT-2011-2188

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted Microsoft Office document...

PT-2011-2187

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.8 Description The issue concerns the MobileMe component in Mac OS X, which uses a cleartext HTTP session for the Mail application to read e-mail aliases. This allows remote attackers to obtain potentially...

PT-2011-2178

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted embedded TrueType font. Recommendations For Apple Mac OS X versions prior to 10.6....

PT-2011-2177

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.8 Description The issue allows local users to potentially obtain sensitive information by reading a log file. This is because the App Store in Apple Mac OS X creates a log entry containing a user's AppleID...

PT-2011-2176

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.8 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and reboot, via Wi-Fi frames on the local wireless network. Recommendations For Apple Mac OS X version...

CVE-2011-0203: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in xftpd in the FTP Server component in Apple Mac OS X before 10.6.8 allows remote attackers to list arbitrary directories by using the root directory as the starting point of a recursive listing...

PT-2011-2896

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.8 Description The issue concerns the IPv6 implementation in the kernel, allowing local users to cause a denial of service through specific vectors involving socket options, resulting in a NULL pointer dereferenc...