CVE-2011-0193

Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Canon RAW image...

CVE-2011-0186

CVE-2011-0186 affects Apple QuickTime on Mac OS X, where memory corruption in JPEG2000 handling could allow remote arbitrary code execution or a crash. The issue is tied to QuickTime’s JPEG2000 processing and is listed with a base score of 4.3 (Medium). Public docs indicate that Apple addressed r...

CVE-2011-0178

The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory...

CVE-2011-0189

CVE-2011-0189: In Mac OS X 10.6, Terminal before 10.6.7 defaults to using SSH version 1 in the New Remote Connection dialog, which could allow MITM attackers to spoof SSH servers via protocol vulnerabilities. Red Hat/EUVD/OpenVAS/Nessus entries corroborate the same issue. Remediation per publicly...

CVE-2011-0182

CVE-2011-0182 affects Apple macOS X kernels prior to 10.6.7, where the i386_set_ldt system call mishandles call gates. The root cause is improper handling of call gate entries, enabling a local attacker to escalate privileges by crafting a malicious call gate entry. The vulnerability yields a loc...

CVE-2011-0183

CVE-2011-0183 : Libinfo in Mac OS X before 10.6.7 fails to handle an unspecified integer field in an NFS RPC packet, causing a denial of service in NFS services (lockd, statd, mountd, portmap) via an integer truncation issue. Affected product: Mac OS X (Libinfo). Root cause: improper handling of ...

CVE-2011-0174

CVE-2011-0174 describes a heap-based buffer overflow in Apple Type Services (ATS) on Mac OS X prior to 10.6.7. A crafted embedded OpenType font in a document can allow remote arbitrary-code execution. The issue affects Mac OS X 10.6.x up to 10.6.6; Apple’s mitigation is the Mac OS X 10.6.7 Securi...

CVE-2011-0172

CVE-2011-0172 affects AirPort in Mac OS X 10.6 up to 10.6.6. The issue is a divide-by-zero in the handling of Wi‑Fi frames over a local wireless network, allowing a remote attacker on the same network to trigger a denial of service and system reboot. The vulnerability is tied to the Mac OS X 10.6...

CVE-2011-0172

AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service divide-by-zero error and reboot via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162...

CVE-2011-0176

CVE-2011-0176 describes multiple heap/buffer overflow vulnerabilities in Apple Type Services (ATS) on Mac OS X prior to 10.6.7. The flaw allows remote attackers to execute arbitrary code by opening or viewing a document containing a crafted embedded Type 1 font. Affected component is ATS handling...

CVE-2011-0174

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font...

CVE-2011-0177

CVE-2011-0177 describes multiple buffer overflow issues in Apple Type Services (ATS) on Mac OS X before 10.6.7. A crafted SFNT-embedded font in a document could trigger arbitrary code execution. Affected components include ATS/OpenType font handling; other related CVEs in the same release cover T...

CVE-2011-0189

The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulnerabilities...

CVE-2011-0194

CVE-2011-0194 affects Apple Mac OS X 10.6 prior to 10.6.7 due to an integer overflow in ImageIO’s handling of JPEG-encoded TIFFs. This can allow remote code execution or a denial of service via a crafted image. Red Hat and other sources reference the same issue; OpenVAS/NESSUS entries corroborate...

CVE-2011-0188

CVE-2011-0188 concerns memory allocation in the BigDecimal implementation (bigdecimal.c) for Ruby 1.9.2-p136 and earlier, used on macOS before 10.6.7 and other platforms. The issue is that VpMemAlloc may misallocate memory for very large BigDecimal values in 64-bit processes, enabling context-dep...

CVE-2011-0186

QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG2000 image...

CVE-2011-0178

CVE-2011-0178 concerns the CarbonCore FSFindFolder API on Mac OS X prior to 10.6.7. When called with the kTemporaryFolderType flag, FSFindFolder returns a world-readable directory, enabling a local attacker to access potentially sensitive information via this directory. The core issue is an infor...

CVE-2011-0175

CVE-2011-0175 involves multiple buffer overflow vulnerabilities in Apple Type Services (ATS) on Mac OS X up to 10.6.7. A crafted embedded TrueType font in a document could trigger heap/buffer overflows, potentially enabling remote arbitrary code execution. The Red Hat/OpenVAS/Nessus references co...

CVE-2011-0190

CVE-2011-0190 affects Mac OS X installations prior to 10.6.7, where Install Helper in Installer mishandles an unspecified URL. This may enable a remote attacker to track user logins by logging network traffic from an agent intended to contact an Apple server. Remediation is provided by Apple’s Se...

CVE-2011-0194

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...