Lucene search

K
AppleMac Os X10.5.3

28 matches found

CVE
CVE
added 2008/07/01 6:41 p.m.62 views

CVE-2008-2309

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a (1) .xht or (2) .xhtm file, which does not trigger a "potentially unsafe" warning message in (a) the Download Validation feature in Mac OS X 10.4 or ...

6.8CVSS7.2AI score0.02463EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.52 views

CVE-2008-4218

Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to (1) i386_set_ldt or (2) i386_get_ldt.

7.2CVSS5.9AI score0.00054EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.48 views

CVE-2008-4236

Apple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted embedded font in a PDF file.

7.1CVSS5.9AI score0.00447EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.47 views

CVE-2008-3608

ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted JPEG image with an embedded ICC profile.

9.3CVSS7AI score0.0543EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.47 views

CVE-2008-4234

Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application association for the file, which does not trigger a "p...

9.3CVSS7.2AI score0.03023EPSS
CVE
CVE
added 2008/07/01 6:41 p.m.46 views

CVE-2008-2314

Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot corners is enabled, allows physically proximate attackers to gain access to a locked session in (1) sleep mode or (2) screen saver mode via unspecified vectors.

4.4CVSS6.1AI score0.00081EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.46 views

CVE-2008-2332

ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted TIFF image.

9.3CVSS7AI score0.0543EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.45 views

CVE-2008-3619

Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading these files.

2.1CVSS5.8AI score0.00051EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.44 views

CVE-2008-2329

Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window.

1.9CVSS6AI score0.00086EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.43 views

CVE-2008-3609

The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file.

7.2CVSS6AI score0.00058EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.43 views

CVE-2008-3621

VideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving H.264 encoded media.

9.3CVSS7.1AI score0.03673EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.43 views

CVE-2008-4222

natd in network_cmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of service (infinite loop) via a crafted TCP packet.

7.1CVSS6AI score0.0018EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.43 views

CVE-2008-4224

UDF in Apple Mac OS X before 10.5.6 allows user-assisted attackers to cause a denial of service (system crash) via a malformed UDF volume in a crafted ISO file.

7.1CVSS5.8AI score0.00675EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.41 views

CVE-2008-4217

Integer signedness error in BOM in Apple Mac OS X before 10.5.6 allows remote attackers to execute arbitrary code via the headers in a crafted CPIO archive, leading to a stack-based buffer overflow.

9.3CVSS7.3AI score0.03148EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.41 views

CVE-2008-4219

The kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service (infinite loop and system halt) by running an application that is dynamically linked to libraries on an NFS server, related to occurrence of an exception in this application.

4.9CVSS5.7AI score0.00073EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.40 views

CVE-2008-2305

Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."

9.3CVSS6.9AI score0.0871EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.40 views

CVE-2008-3613

Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving a search for a remote disk on the local network.

6.1CVSS6.1AI score0.00295EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.40 views

CVE-2008-4221

The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted date string, related to improper memory allocation.

10CVSS7.4AI score0.0089EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.40 views

CVE-2008-4237

Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting.

10CVSS5.9AI score0.00524EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.39 views

CVE-2008-2331

Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator.

5CVSS6AI score0.00208EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.39 views

CVE-2008-3617

Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer.

5CVSS6.3AI score0.0032EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.39 views

CVE-2008-3618

The File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does not inform users that the complete contents of their own home directories are shared for their own use, which might allow attackers to leverage other vulnerabilities and access files for which sharing wa...

9CVSS6.3AI score0.006EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.39 views

CVE-2008-3622

Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message that reaches a mailing-list archive, aka "persistent JavaScript injection."

4.3CVSS5.8AI score0.00453EPSS
CVE
CVE
added 2008/07/01 6:41 p.m.38 views

CVE-2008-2311

Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbitrary code via a symlink attack, probably related to a race condition and automatic execution of a downloaded file.

7.6CVSS7.3AI score0.02888EPSS
CVE
CVE
added 2008/12/17 1:30 a.m.38 views

CVE-2008-4220

Integer overflow in the inet_net_pton API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. NOTE: this may be related to the WLB-2008080064 advisory published by Securit...

10CVSS7.6AI score0.0089EPSS
CVE
CVE
added 2008/07/01 6:41 p.m.36 views

CVE-2008-2313

Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain privileges by inserting a Trojan horse file into this directory.

4.6CVSS6AI score0.00052EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.36 views

CVE-2008-3616

Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via vectors associated with "passing untrusted input" to unspecified API functions.

10CVSS6.9AI score0.01065EPSS
CVE
CVE
added 2008/09/16 11:0 p.m.35 views

CVE-2008-3610

Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by selection of an arbitrary account fro...

7.6CVSS6.5AI score0.00261EPSS