CVE-2013-0982

CVE-2013-0982 concerns the Private Browsing feature in CFNetwork on macOS OS X versions prior to 10.8.4. The issue: permanent cookies can be stored after quitting Safari, potentially allowing a physically proximate attacker with an unattended workstation to bypass cookie-based authentication. Aff...

CVE-2013-3953

CVE-2013-3953 concerns the XNU kernel on macOS, where the mach_port_space_info API in osfmk/ipc/mach_debug.c does not initialize a structure member. This causes information disclosure from kernel heap memory via a crafted call on affected systems (OS X 10.8.x). Connected documents confirm the ker...

CVE-2013-3949

The posixspawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the POSIXSPAWNDISABLEASLR and POSIXSPAWNALLOWDATAEXEC flags for setuid and setgid programs, which allows local users to bypass intended access restrictions via a wrapper program that calls the...

CVE-2013-1024

CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

CVE-2013-0984

Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted message...

PT-2013-2816

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description The issue is related to the CoreMedia Playback in Apple Mac OS X, where memory is not properly initialized during the processing of text tracks. This allows remote attackers to execute...

PT-2013-2774

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.8.4 Description The issue concerns the Private Browsing feature in CFNetwork, which fails to prevent the storage of permanent cookies when exiting Safari. This could allow physically proximate attackers to bypass...

PT-2013-2776

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions through 10.6.8 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a daemon crash, via a crafted message. Recommendations For Apple Mac OS X versions throug...

Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)

Binary data 6857.prm...

Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)

Binary data 801016.prm...

Apple Mac OS X Directory Service buffer overflow

Buffer overflow on response parsing...

CVE-2013-0990: Undefined Security Weakness

SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors...

PT-2013-4756

Name of the Vulnerable Software and Affected Versions libc in Apple iOS versions 6.1.3 libc in Apple Mac OS X versions 10.8.x Description The issue allows local users to bypass cookie randomization by executing a program with a call-path beginning with the stack-guard= substring. This can be...

PT-2013-2775

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description A stack consumption issue in CoreAnimation allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted text glyph in a URL...

CVE-2013-1024: Improper Input Validation

CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file...

PT-2013-2782

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description The issue allows remote authenticated users to create or modify files outside of a shared directory when file sharing is enabled. Recommendations For Apple Mac OS X versions prior to 10.8.4,...

PT-2013-2777

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description The issue is related to the Disk Management in Apple Mac OS X, where it does not properly authenticate attempts to disable FileVault. This allows local users to cause a denial of service,...

PT-2013-4759

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.8.x Description The issue is related to the posix spawn system call in the XNU kernel, which does not properly validate data for file actions and port actions. This allows local users to cause a denial of service pani...

CVE-2013-0984: Improper Restriction of Operations within the Bounds of a Memory Buffer

Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted message...

PT-2013-2767

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PICT image. This is due to a buffer overflow in the QuickDraw Manager. Recommendations F...