CVE-2008-3961

The CVE-2008-3961 entry corresponds to Adobe Illustrator CS2 on Macintosh and describes multiple unspecified vulnerabilities that allow user-assisted attackers to execute arbitrary code via a crafted AI file. The vulnerability is rated high (CVSS v2 base score 9.3) with complete impact on confide...

CVE-2008-3961

Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file...

DEBIAN-CVE-2008-1036

The International Components for Unicode ICU library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting XS...

DEBIAN-CVE-2008-1033

The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a printer requires a password, allows attackers to obtain sensitive information credentials by reading the log data, related to "authentication environment variables."...

Server side request forgery (ssrf)

Novell NetWare 6.5 allows attackers to cause a denial of service ABEND via a crafted Macintosh iPrint client request...

CVE-2008-1701

Novell NetWare 6.5 allows attackers to cause a denial of service ABEND via a crafted Macintosh iPrint client request...

CVE-2008-1701

Novell NetWare 6.5 allows attackers to cause a denial of service ABEND via a crafted Macintosh iPrint client request...

CVE-2008-1701

Novell NetWare 6.5 is affected. The vulnerability allows an attacker to cause a denial of service (ABEND) by sending a crafted Macintosh iPrint client request. The issue appears to be triggered via iPrint client interactions, with CVSS metrics indicating a network-vector, low complexity, no authe...

Microsoft Excel conditional formatting vulnerability

Added: 03/14/2008 CVE: CVE-2008-0117 BID: 28170 OSVDB: 42731 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a file...

Microsoft Excel conditional formatting vulnerability

Added: 03/14/2008 CVE: CVE-2008-0117 BID: 28170 OSVDB: 42731 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a file...

Microsoft Excel conditional formatting vulnerability

Added: 03/14/2008 CVE: CVE-2008-0117 BID: 28170 OSVDB: 42731 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem A vulnerability in Microsoft Excel allows command execution when a user opens a file...

Apple QuickTime multiple security vulnerabilities

Buffer overflow on parsing Macintosh resources embedded into QuickTime movie. Quicktime Image IDSC atom memory corruption...

Design/Logic Flaw

Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption...

[Full-disclosure] iDefense Security Advisory 01.15.08: Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability

iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND Quicktime is Apple's media player product, and is used to render video and other media. For more information visit the vendor's web site at the following URL...

PT-2008-1697 · Apple · Iphone +3

Name of the Vulnerable Software and Affected Versions: Apple iPhone versions 1.0 through 1.1.2 Apple iPod touch versions 1.1 through 1.1.2 Apple Mac OS X versions 10.5 through 10.5.1 Description: The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafte...

DEBIAN-CVE-2007-5848

Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service...

PT-2007-5460 · Apple · Macos X

Name of the Vulnerable Software and Affected Versions: Mac OS X versions 10.4 through 10.4.10 Description: The issue is related to an integer signedness error in the Networking component, which allows local users to execute arbitrary code via a crafted AppleTalk message. This message contains a...

PT-2007-5840 · Apple · Macos X

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.4 through 10.4.10 Description: The issue allows attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is achieved through craft...

Symantec AntiVirus For Macintosh Mount扫描本地特权提升漏洞

Symantec AntiVirus For Macintosh是一款苹果系统上的反病毒应用程序。 Symantec AntiVirus For Macintosh包含的Mount Scan功能存在设计错误，本地攻击者可以利用漏洞提升特权。 Symantec AntiVirus for Macintosh的Mount Scan功能使用一个可执行程序，并且Norton AntiVirus for Macintosh以ROOT访问权限运行。组管理成员可以使用恶意程序替代这个可执行程序，获得ROOT访问。 /Library/Application Support文件夹使用组属admin gid...

Code injection

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions group writable, which allows local admin users to gain root privileges by replacing...