CVE-2011-0194

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...

CVE-2011-0193

CVE-2011-0193 describes multiple buffer overflows in Apple Mac OS X "Image RAW" processing, allowing remote code execution or denial of service via a crafted Canon RAW image. Affected: Mac OS X before 10.6.7 (10.6.x); impact includes arbitrary code execution or crash. Remediation: Apple released ...

CVE-2011-0181

CVE-2011-0181 describes an integer overflow in Apple’s ImageIO on Mac OS X before 10.6.7. A crafted XBM image can allow remote attackers to execute arbitrary code or cause a denial of service (application crash). Affected: Mac OS X 10.6.x prior to 10.6.7; component: ImageIO (and related image han...

CVE-2011-0181: Undefined Security Weakness

Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted XBM image...

CVE-2011-0183: Undefined Security Weakness

Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service lockd, statd, mountd, or portmap outage via a crafted packet, related to an "integer truncation issue."...

NGS00057 Patch Notification: Apple Mac OS X ImageIO Integer Overflow

Apple Mac OS X ImageIO Integer Overflow 22/03/2011 Dominic Chell of NGS Secure has discovered a High risk vulnerability in Mac OS X ImageIO. An integer overflow issue exists in ImageIO's handling of JPEG-encoded TIFF images. Viewing a maliciously crafted TIFF image may result in an unexpected...

ZDI-11-108: Mac OS X Compact Font Format Decoder Remote Code Execution Vulnerability

ZDI-11-108: Mac OS X Compact Font Format Decoder Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-108 March 22, 2011 -- CVE ID: CVE-2011-0176 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Apple -- Affected Products: Apple Preview --...

CVE-2011-0193: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Canon RAW image...

PT-2011-2171

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7 Description The issue is related to the Install Helper in the Installer component, which does not properly process an unspecified URL. This could allow remote attackers to track user logins by logging network...

About the security content of Mac OS X v10.6.7 and Security Update 2011-001

About the security content of Mac OS X v10.6.7 and Security Update 2011-001 Last Modified: March 21, 2011 Article: HT4581 Email this article Print this page Summary This document describes the security content of Mac OS X v10.6.7 and Security Update 2011-001, which can be downloaded and installed...

PT-2011-2174

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue is related to an integer overflow in ImageIO, which can be triggered by a crafted TIFF image with JPEG encoding. This can allow remote attackers to execute arbitrary code or cause a...

CVE-2011-0173: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

CVE-2011-0176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font...

CVE-2011-0172: Undefined Security Weakness

AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service divide-by-zero error and reboot via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162...

CVE-2011-0187: Undefined Security Weakness

The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect...

CVE-2011-0180: Undefined Security Weakness

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary 1 HFS, 2 HFS+, or 3 HFS+J files via a crafted FREADBOOTSTRAP ioctl call...

CVE-2011-0182: Improper Input Validation

The i386setldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry...

CVE-2011-0178: Exposure of Sensitive Information to an Unauthorized Actor

The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory...

CVE-2011-0177: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font...

CVE-2011-0186: Out-of-bounds Write

QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG2000 image...