15331 matches found
Design/Logic Flaw
AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service divide-by-zero error and reboot via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162...
Cross site scripting
The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect...
Buffer overflow
Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font...
Integer overflow
Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...
Buffer overflow
Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Canon RAW image...
Memory corruption
CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a document that contains a crafted embedded font...
Design/Logic Flaw
The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...
CVE-2011-0177
Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...
CVE-2011-0173
CVE-2011-0173 describes multiple format-string vulnerabilities in AppleScript and AppleScript Studio dialogs (display dialog/display alert) on Mac OS X prior to 10.6.7. The issues can allow a context-dependent attacker to cause an arbitrary code execution or a denial of service (application crash...
CVE-2011-0180
CVE-2011-0180 describes an integer overflow in OS X HFS handling (F_READBOOTSTRAP ioctl) that can allow a local unprivileged user to read arbitrary files on HFS, HFS+, or HFS+J. Affected: Apple Mac OS X kernel prior to 10.6.7. Root cause: overflow in enforcing bootstrap data bound (1024 bytes) ca...
CVE-2011-0175
Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font...
CVE-2011-0190
Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server...
CVE-2011-0173
Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...
CVE-2011-0182
The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...
CVE-2011-0184
QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via an Excel spreadsheet with a crafted formula that uses unspecified opcodes...
CVE-2011-0184
CVE-2011-0184 : QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote code execution or a memory-corruption-based denial of service via a crafted Excel spreadsheet relying on unspecified opcodes. Affected: Mac OS X 10.6 (pre-10.6.7). Impact as described in sources; exploits and vector deta...
CVE-2011-0180
Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary 1 HFS, 2 HFS+, or 3 HFS+J files via a crafted FREADBOOTSTRAP ioctl call...
CVE-2011-0179
CVE-2011-0179 affects CoreText in Mac OS X up to 10.6.6, where viewing or downloading a document with a crafted embedded font may cause memory corruption, enabling arbitrary code execution or a crash. The issue is addressed in Mac OS X 10.6.7 Security Update 2011-001; applies to Mac OS X v10.6.x....
CVE-2011-0187
CVE-2011-0187 affects Mac OS X via the CoreMedia/QuickTime path: a cross-origin redirect in CoreMedia could bypass Same Origin Policy and allow access to potentially sensitive video data. The public details in connected docs indicate this is tied to OS X Lion/QuickTime/CoreMedia components, with ...