EUVD-2009-1236

Malware in sbrugna...

EUVD-2009-0151

Malware in sbrugna...

Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008

The remote host is missing Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008. One or more of the following components are affected: ATS BOM CoreGraphics CoreServices CoreTypes Flash Player Plug-in Kernel Libsystem Managed Client networkcmds Podcast Producer UDF OpenVAS Vulnerability Test...

n.runs-SA-2009.001 - OS X CFNetwork advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2009.001 15-May-2009 Vendor: Apple Inc., http://www.apple.com Affected Products: Mac OS X 10.5.6 Vulnerability: Heap-based buffer overflow in CFNetwork component remote Risk: HIGH Vendor communication: 2009/04/17 Initial notification o...

n.runs-SA-2009.001 - OS X CFNetwork advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2009.001 15-May-2009 Vendor: Apple Inc., http://www.apple.com Affected Products: Mac OS X 10.5.6 Vulnerability: Heap-based buffer overflow in CFNetwork component remote Risk: HIGH Vendor communication: 2009/04/17 Initial notification o...

CVE-2009-1238

Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service kernel memory corruption by simultaneously executing the same HFSSETPKGEXTENSIONS code path in multiple threads, which is problematic...

CVE-2009-1235

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving...

CVE-2009-1237

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service kernel memory consumption via a crafted 1 SYSaddprofil or 2 SYSmacgetfsstat system call...

CVE-2009-1060

Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009...

CVE-2009-1060

CVE-2009-1060 : A vulnerability in Apple Safari on Mac OS X 10.5.6 that permits remote code execution via clicking a link; vector is described as unknown. Demonstrated by Charlie Miller at Pwn2Own 2009. The connected documents do not provide detailed root cause, affected component versions beyond...

CVE-2009-1042

Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009...

CVE-2009-1042

Affected software is Apple Safari on Mac OS X 10.5.6. The vulnerability is described as an unspecified remote code execution triggered by clicking a link, demonstrated during PWN2OWN 2009. No concrete root-cause details, affected subcomponents, or remediation/version fixes are provided in the con...

CVE-2009-0138

servermgrd Server Manager in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration...

Heap overflow

Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string...

Memory corruption

Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted movie file that triggers memory corruption...

Default configuration

Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder...

CVE-2009-0014

Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder...

CVE-2009-0015

CVE-2009-0015 affects Apple Mac OS X 10.5.6, specifically the fseventsd component in the FSEvents framework. The vulnerability allows local users to view sensitive filesystem activity and directory names via credential-management related vectors (unverified details). The exploitation is described...

CVE-2009-0012

CVE-2009-0012: Heap-based buffer overflow in CoreText on Apple Mac OS X 10.5.6 can allow remote code execution via a crafted Unicode string. The NVD entry documents the vulnerability and its impact (remote code execution, integrity/confidentiality/availability complete). Affected product: Mac OS ...

CVE-2009-0015

Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information filesystem activities and directory names via unknown vectors related to "credential management."...