EUVD-2009-2814

Malware in sbrugna...

CVE-2010-1846

Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted RAW image...

CVE-2010-1840

Stack-based buffer overflow in the password-validation functionality in Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

CVE-2010-1831

Buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a long name of an embedded font in a document...

Apple Ships Java Patches, Says It May Drop Java From Future OS X Releases

Apple has shipped security fixes for a number of bugs in its Java implementation, and the company also said that it has deprecated its Java implementation in OS X and may remove it from future release of the operating system. Apple’s patch release on Wednesday included several fixes for...

Cross site scripting

Cross-site scripting XSS vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page...

Authorization

NetAuthSysAgent in Network Authorization in Apple Mac OS X 10.5.8 does not have the expected authorization requirements, which allows local users to gain privileges via unspecified vectors...

CVE-2010-0541

CVE-2010-0541 : A cross-site scripting (XSS) vulnerability in the WEBrick HTTP server of Ruby on Apple Mac OS X 10.5.8 and 10.6 before 10.6.4 allows remote attackers to inject arbitrary script/HTML via a crafted URI that triggers a UTF-7 error page. The connected documents confirm the existence a...

CVE-2010-0541

Cross-site scripting XSS vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page...

CVE-2010-0540

Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...

MacOS X EvoCam HTTP GET Overflow

$Id: evocamwebserver.rb 9460 2010-06-09 18:41:58Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7

No description provided by source. !/usr/bin/python Exploit Title: OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7 Date: 1st June 2010 Author: d1dn0t didnot A-T me.com Software Link: http://www.pizza.org/evocam.dmg Version: EvoCam 3.6.6 and 3.6.7 Tested on: OS X 10.5.8 Intel import...

Mac OS X EvoCam web servers 3.6.6 and 3.6.7 remote buffer overflow

No description provided by source. !/usr/bin/python Exploit Title: OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7 Date: 1st June 2010 Author: d1dn0t didnot A-T me.com Software Link: http://www.pizza.org/evocam.dmg Version: EvoCam 3.6.6 and 3.6.7 Tested on: OS X 10.5.8 Intel import...

Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2010-0523

Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers to obtain sensitive information or possibly have unspecified other impact via a crafted file, as demonstrated by a Java applet...

Buffer overflow

Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted NEF image...

CVE-2010-0055

xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package...

Code injection

xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package...

CVE-2010-0506

Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted NEF image...

CVE-2010-0056

Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document...