Lucene search

K
AppleMac Os X Server10.4.6

11 matches found

CVE
CVE
added 2006/06/27 10:13 p.m.51 views

CVE-2006-1470

OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error.

5CVSS6.1AI score0.13704EPSS
CVE
CVE
added 2006/04/21 10:2 p.m.50 views

CVE-2006-1983

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKi...

6.4CVSS7.8AI score0.37958EPSS
CVE
CVE
added 2006/06/27 10:13 p.m.46 views

CVE-2006-1469

Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image.

7.5CVSS7.6AI score0.02451EPSS
CVE
CVE
added 2006/04/21 10:2 p.m.44 views

CVE-2006-1985

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.

5.1CVSS7.8AI score0.2217EPSS
CVE
CVE
added 2006/05/12 9:2 p.m.43 views

CVE-2006-1456

Buffer overflow in QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted RTSP request, which is not properly handled during message logging.

7.5CVSS7.6AI score0.0456EPSS
CVE
CVE
added 2006/05/12 9:2 p.m.43 views

CVE-2006-1457

Safari on Apple Mac OS X 10.4.6, when "Open `safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink.

2.6CVSS6.3AI score0.01227EPSS
CVE
CVE
added 2006/12/20 2:28 a.m.43 views

CVE-2006-5681

QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects.

2.6CVSS6.2AI score0.00627EPSS
CVE
CVE
added 2006/06/27 10:13 p.m.42 views

CVE-2006-1471

Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file.

4.6CVSS6.9AI score0.00073EPSS
CVE
CVE
added 2006/09/19 7:7 p.m.38 views

CVE-2006-4866

Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.

4.6CVSS7.6AI score0.00642EPSS
CVE
CVE
added 2006/05/19 10:0 p.m.37 views

CVE-2005-3782

Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down buttons" option is disabled, allows users with physical access to bypass login and reboot the system by entering ">restart", ">power", or ">shutdown" sequenc...

2.1CVSS6.8AI score0.00068EPSS
CVE
CVE
added 2006/05/12 9:2 p.m.37 views

CVE-2006-1455

QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to cause a denial of service (crash and connection interruption) via a QuickTime movie with a missing track, which triggers a null dereference.

7.8CVSS6.2AI score0.01382EPSS