43 matches found
CVE-2009-0160
QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image that triggers memory corruption...
Memory corruption
QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image that triggers memory corruption...
CVE-2009-0010
Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PICT image with a crafted 0x77 Poly tag and a crafted length field, whi...
CVE-2009-0010
Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a PICT image with a crafted 0x77 Poly tag and a crafted length field, whi...
CVE-2009-0010
CVE-2009-0010 is a QuickTime/Apple QuickDraw vulnerability affecting Apple QuickTime and Mac OS X. The issue is a heap-based buffer overflow in parsing PICT images, triggered by a crafted 0x77 Poly tag length, which can lead to remote code execution or a crash. Public disclosures cite affected pr...
CVE-2009-0160
CVE-2009-0160 affects Apple QuickDraw Manager in Mac OS X 10.4.11 and 10.5 up to pre-10.5.7. A crafted PICT image can trigger memory corruption, leading to arbitrary code execution or an application crash. The vulnerability is addressed by Apple’s Mac OS X Security Update 2009-002 (HT3549), discu...
CVE-2009-0160
QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image that triggers memory corruption...
Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. Mac OS X 10.5.7 contains security fixes for the following products : - Apache - ATS - BIND - CFNetwork - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - iChat -...
Mac OS X Multiple Vulnerabilities (Security Update 2009-002)
The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied. This security update contains fixes for the following products : - Apache - ATS - BIND - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - IPSec -...
Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.9 or a version of Mac OS X 10.3 which does not have Security Update 2007-003 applied. This update contains several security fixes for the following programs : - ColorSync - CoreGraphics - Crash Reporter - CUPS ...
Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)
Binary data 3947.prm...
CVE-2006-4395
Unspecified vulnerability in QuickDraw Manager in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows context-dependent attackers to cause a denial of service "memory corruption" and crash via a crafted PICT image that is not properly handled by a certain "unsupported QuickDraw operation."...
CVE-2006-4395
CVE-2006-4395 affects Apple Mac OS X 10.3.9 and 10.4 up to 10.4.7, where QuickDraw Manager mishandles certain PICT images, leading to memory corruption. The connected CERT entry describes exploitation potential for remote arbitrary code execution or denial of service when a crafted PICT image tri...
CVE-2006-4395
Unspecified vulnerability in QuickDraw Manager in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows context-dependent attackers to cause a denial of service "memory corruption" and crash via a crafted PICT image that is not properly handled by a certain "unsupported QuickDraw operation."...
[SA22187] Mac OS X Security Update Fixes Multiple Vulnerabilities
TITLE: Mac OS X Security Update Fixes Multiple Vulnerabilities SECUNIA ADVISORY ID: SA22187 VERIFY ADVISORY: http://secunia.com/advisories/22187/ CRITICAL: Highly critical IMPACT: Security Bypass, Spoofing, Exposure of sensitive information, Privilege escalation, DoS, System access WHERE: From...
Apple QuickDraw Manager fails to properly handle malicious PICT images
Overview A vulnerability exists in how Apple OS X handles PICT images. If successfully exploited, this vulnerability may allow a remote attacker to execute arbitrary code, or create a denial-of-service condition. Description From Apple,Certain applications invoke an unsupported QuickDraw operatio...
Mac OS X 10.4.x < 10.4.8 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.8. Mac OS X 10.4.8 contains several security fixes for the following programs : - CFNetwork - Flash Player - ImageIO - Kernel - LoginWindow - Preferences - QuickDraw Manager - SASL - WebCore - Workgroup Manager C Tenabl...
Mac OS X Multiple Vulnerabilities (Security Update 2006-006)
The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied. Security Update 2006-006 contains several security fixes for the following programs : - CFNetwork - Flash Player - QuickDraw Manager - SASL - WebCore C Tenable Network Security, Inc. if...
CVE-2005-2744
Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, and Finder, allows remote attackers to execute arbitrary code via a crafted PICT file...
CVE-2005-2744
Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, and Finder, allows remote attackers to execute arbitrary code via a crafted PICT file...