Lucene search

K

11 matches found

CVE
CVE
added 2004/12/23 5:0 a.m.85 views

CVE-2004-0803

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

7.5CVSS9.8AI score0.17883EPSS
CVE
CVE
added 2004/09/01 4:0 a.m.61 views

CVE-2004-0165

Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.

5CVSS7.2AI score0.02148EPSS
CVE
CVE
added 2004/07/07 4:0 a.m.50 views

CVE-2004-0486

HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.

7.6CVSS7.2AI score0.08878EPSS
CVE
CVE
added 2004/08/18 4:0 a.m.50 views

CVE-2004-0515

Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files."

4.6CVSS6.6AI score0.00077EPSS
CVE
CVE
added 2004/03/29 5:0 a.m.47 views

CVE-2003-1006

Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.

7.2CVSS7.3AI score0.00346EPSS
CVE
CVE
added 2004/08/18 4:0 a.m.47 views

CVE-2004-0518

Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors.

7.5CVSS6.5AI score0.00552EPSS
CVE
CVE
added 2004/11/23 5:0 a.m.46 views

CVE-2004-0743

Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak.

5CVSS6.2AI score0.00405EPSS
CVE
CVE
added 2004/08/18 4:0 a.m.44 views

CVE-2004-0517

Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different vulnerability than CVE-2004-0516.

4.6CVSS6.5AI score0.00077EPSS
CVE
CVE
added 2004/11/23 5:0 a.m.43 views

CVE-2004-0744

The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.

5CVSS6.1AI score0.00911EPSS
CVE
CVE
added 2004/08/18 4:0 a.m.41 views

CVE-2004-0516

Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517.

4.6CVSS6.5AI score0.00077EPSS
CVE
CVE
added 2004/08/18 4:0 a.m.39 views

CVE-2004-0514

Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."

7.2CVSS6.5AI score0.00057EPSS