CVE-2011-0174: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple Type Services ATS in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font...

PT-2011-2163

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7 Description The issue is related to the i386 set ldt system call in the kernel, which does not properly handle call gates. This allows local users to gain privileges via vectors involving the creation of a cal...

PT-2011-2162

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue is related to an integer overflow in ImageIO, which can be triggered by a crafted XBM image. This can allow remote attackers to execute arbitrary code or cause a denial of service,...

CVE-2011-0190: Improper Input Validation

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server...

CVE-2011-0194: Undefined Security Weakness

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...

PT-2011-2165

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted Excel spreadsheet with a maliciou...

PT-2011-2159

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7 Description The issue allows local users to obtain potentially sensitive information by accessing a world-readable directory provided by the FSFindFolder API in response to a call with the kTemporaryFolderType...

CVE-2011-0189: Undefined Security Weakness

The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulnerabilities...

PT-2011-2156

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue is related to multiple buffer overflows in Apple Type Services ATS that allow remote attackers to execute arbitrary code. This can be achieved by using a document containing a craft...

PT-2011-2160

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a document containing a crafted embedded...

PT-2011-2155

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a document containing a crafted embedded OpenType font. Recommendations For Apple Mac OS X...

PT-2011-2158

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue is related to multiple buffer overflows in Apple Type Services ATS that allow remote attackers to execute arbitrary code. This can be achieved by providing a document containing a...

PT-2011-2154

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue allows context-dependent attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via format string specifiers in a display dialog or...

PT-2011-2153

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and reboot, via Wi-Fi frames on the local wireless network. Recommendations For versions...

PT-2011-2170

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The default configuration of Terminal in Apple Mac OS X uses SSH protocol version 1, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol...

PT-2011-2161

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7 Description The issue is related to an integer overflow in HFS, which affects local users. This allows them to read arbitrary files, including HFS, HFS+, or HFS+J files, by making a crafted F READBOOTSTRAP ioc...

PT-2011-2173

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue is related to multiple buffer overflows in the Image RAW component of Apple Mac OS X. This can be exploited by remote attackers who send a crafted Canon RAW image, potentially leadi...

CVE-2011-0179: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a document that contains a crafted embedded font...

About the security content of Mac OS X v10.6.7 and Security Update 2011-001

About the security content of Mac OS X v10.6.7 and Security Update 2011-001 Last Modified: March 21, 2011 Article: HT4581 Email this article Print this page Summary This document describes the security content of Mac OS X v10.6.7 and Security Update 2011-001, which can be downloaded and installed...

CVE-2011-0178: Exposure of Sensitive Information to an Unauthorized Actor

The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory...