Mac OS X

CVEs (2,090)

• CVE-2014-4377Sep 18, 2014
  Apple Inc.

  iOS
  risk 0.01cvss —epss 0.07

  Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

• CVE-2013-5135Oct 24, 2013
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.11

  Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username.

• CVE-2012-3716Sep 20, 2012
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.07

  CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write or read) via a crafted text glyph.

• CVE-2011-1783Jun 6, 2011
  Apache

  Subversion
  risk 0.01cvss —epss 0.07

  The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in…

• CVE-2011-1752Jun 6, 2011
  Apache

  Subversion
  risk 0.01cvss —epss 0.08

  The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May…

• CVE-2010-4494Dec 7, 2010
  Google

  Chrome
  risk 0.01cvss —epss 0.08

  Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

• CVE-2010-2519Aug 19, 2010
  FreeType

  Freetype
  risk 0.01cvss —epss 0.06

  Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font…

• CVE-2010-1411Jun 17, 2010
  LibTIFF

  Libtiff
  risk 0.01cvss —epss 0.13

  Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service…

• CVE-2009-3095Sep 8, 2009
  Apache

  HTTP Server
  risk 0.01cvss —epss 0.13

  The mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended access restrictions and send arbitrary commands to an FTP server via vectors related to the embedding of these commands in the Authorization HTTP header, as demonstrated by a certain…

• CVE-2009-2193Aug 6, 2009
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.09

  Buffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a crafted AppleTalk response packet.

• CVE-2009-2188Aug 6, 2009
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.08

  Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with crafted EXIF metadata.

• CVE-2009-1726Aug 6, 2009
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.08

  Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image containing an embedded ColorSync profile.

• CVE-2009-0010May 13, 2009
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.08

  Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a crafted 0x77 Poly tag and a…

• CVE-2009-0946Apr 17, 2009
  FreeType

  Freetype
  risk 0.01cvss —epss 0.09

  Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.

• CVE-2009-0846Apr 9, 2009
  Mit

  Kerberos 5
  risk 0.01cvss —epss 0.09

  The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an…

• CVE-2008-4211Oct 10, 2008
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.07

  Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via…

• CVE-2008-2307Jun 23, 2008
  Apple Inc.

  Safari
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving…

• CVE-2008-1574Jun 2, 2008
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.07

  Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image that triggers a heap-based buffer overflow.

• CVE-2008-1034Jun 2, 2008
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.08

  Integer underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted help:topic URL that triggers a buffer overflow.

• CVE-2008-0888Mar 17, 2008
  Unzip Project

  Unzip
  risk 0.01cvss —epss 0.06

  The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or…