Show filters
191 Total Results
Displaying 1-10 of 191
Sort by:
Attacker Value
Unknown
CVE-2010-1816
Disclosure Date: April 13, 2017 (last updated November 26, 2024)
Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted image.
0
Attacker Value
Unknown
CVE-2010-1821
Disclosure Date: April 13, 2017 (last updated November 26, 2024)
Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges.
0
Attacker Value
Unknown
CVE-2013-0984
Disclosure Date: June 05, 2013 (last updated October 05, 2023)
Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted message.
0
Attacker Value
Unknown
CVE-2013-0973
Disclosure Date: March 15, 2013 (last updated October 05, 2023)
Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream.
0
Attacker Value
Unknown
CVE-2013-0966
Disclosure Date: March 15, 2013 (last updated October 05, 2023)
The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.
0
Attacker Value
Unknown
CVE-2013-0971
Disclosure Date: March 15, 2013 (last updated October 05, 2023)
Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted ink annotations in a PDF document.
0
Attacker Value
Unknown
CVE-2012-3489
Disclosure Date: October 03, 2012 (last updated February 15, 2024)
The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content that triggers a parsing error, via an XML value that refers to (1) a DTD or (2) an entity, related to an XML External Entity (aka XXE) issue.
0
Attacker Value
Unknown
CVE-2012-3719
Disclosure Date: September 20, 2012 (last updated October 05, 2023)
Mail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows remote attackers to execute arbitrary plugin code via an e-mail message that triggers the loading of a third-party plugin.
0
Attacker Value
Unknown
CVE-2012-3718
Disclosure Date: September 20, 2012 (last updated October 05, 2023)
Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.
0
Attacker Value
Unknown
CVE-2012-3722
Disclosure Date: September 20, 2012 (last updated October 05, 2023)
The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.
0
