CVE-2013-5170

CVE-2013-5170 affects Apple Mac OS X prior to 10.9, due to a buffer underflow in CoreGraphics when processing PDFs. This can allow remote attackers to execute arbitrary code or cause an application crash by delivering a crafted PDF. No remediation details are provided in the supplied documents. T...

CVE-2013-5173

The random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy exclusive access for processing of large requests, which allows local users to cause a denial of service temporary generator outage via an application that requires many random numbers...

CVE-2013-5178

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

CVE-2013-5168

Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL...

CVE-2013-5192

CVE-2013-5192 affects Apple Mac OS X before 10.9. The USB hub controller is susceptible to a denial of service (system crash) when a crafted request targets (1) a port or (2) a port number. This description is consistent across multiple sources (NVD/Red Hat cve page); no public details on the und...

CVE-2013-5174

Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service system crash via a crafted tty read operation...

CVE-2013-5190

Smart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate-revocation checks, which allows remote attackers to cause a denial of service Smart Card usage outage by interfering with the revocation-check procedure...

CVE-2013-5174

CVE-2013-5174 affects the Apple Mac OS X kernel prior to 10.9. The issue is an integer signedness error in the kernel’s handling of a crafted tty read operation, enabling a local user to trigger a denial of service (system crash) . Root cause is the signedness bug in the kernel code. Public refer...

CVE-2013-5180

The srandomdev function in Libc in Apple Mac OS X before 10.9, when the kernel random-number generator is unavailable, produces predictable values instead of the intended random values, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveragi...

CVE-2013-5189

CVE-2013-5189 describes an issue in Apple Mac OS X before 10.9 where an administrative system-preferences setting is not preserved across software updates. The root cause is the failure to maintain that setting after an update, which can allow context-dependent attackers to bypass intended access...

CVE-2013-5168

CVE-2013-5168 affects Apple Mac OS X before 10.9. The vulnerability in the Console component allows a user-assisted remote attacker to execute arbitrary applications by triggering a log entry with a crafted attached URL. This payload mechanism relies on the Console/logging workflow to run arbitra...

CVE-2013-5187

The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and instead incorrectly relies on a certain timeout setting, which allows physically proximate attackers to obtain sensitive information by reading a screen that...

CVE-2013-5173

CVE-2013-5173: The kernel random-number generator in Apple Mac OS X before 10.9 allows local users to cause a denial of service (partial availability) by issuing requests for many random numbers. Affected: Mac OS X prior to 10.9. No remediation details are provided in the supplied documents.

CVE-2013-5165

socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option, which allows remote attackers to bypass intended access restrictions via a network connection to an application for which blocking was configured...

CVE-2013-5176

The kernel in Apple Mac OS X before 10.9 does not properly handle integer values during unspecified tty device operations, which allows local users to cause a denial of service system hang by triggering a truncation error...

CVE-2013-5176

CVE-2013-5176 affects Apple Mac OS X kernels prior to 10.9. The issue is in handling integer values during unspecified tty device operations, enabling a local attacker to trigger a truncation error that can cause a system hang (denial of service). The available connected sources reiterate the sam...

CVE-2013-5171

CVE-2013-5171 affects Apple Mac OS X prior to 10.9. The vulnerability is in CoreGraphics and allows local users to bypass Secure Input Mode and log keystrokes for arbitrary applications through a hotkey event registration. The issue is documented in multiple sources (e.g., Red Hat, NVD) with the ...

CVE-2013-5178

CVE-2013-5178 : In Apple Mac OS X prior to 10.9, LaunchServices does not properly restrict Unicode characters in filenames, allowing context-dependent attackers to spoof file extensions via crafted character sequences. The underlying issue is the handling/filtering of Unicode characters in displa...

PT-2013-5415

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description A buffer underflow issue in CoreGraphics allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted PDF document...

CVE-2013-5174: Undefined Security Weakness

Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service system crash via a crafted tty read operation...