Apple

macOS X

3207 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2009-2840

  • EPSS 0.06%
  • Published 10.11.2009 19:30:01
  • Last modified 09.04.2025 00:30:58

Spotlight in Apple Mac OS X 10.5.8 does not properly handle temporary files, which allows local users to overwrite arbitrary files in the context of a different user's privileges via unspecified vectors.

4.3

CVE-2009-3767

  • EPSS 1.77%
  • Published 23.10.2009 19:30:00
  • Last modified 09.04.2025 00:30:58

libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-...

6.8

CVE-2009-2803

  • EPSS 0.89%
  • Published 14.09.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

CarbonCore in Apple Mac OS X 10.4.11 and 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a file with a crafted resource fork.

6.8

CVE-2009-2804

  • EPSS 9.19%
  • Published 14.09.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an ...

6.8

CVE-2009-2805

  • EPSS 2.42%
  • Published 14.09.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JBIG2 stream in a PDF file, leading to a heap-based buffer overflow...

7.2

CVE-2009-2807

  • EPSS 0.07%
  • Published 14.09.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors.

6.8

CVE-2009-2809

  • EPSS 2.41%
  • Published 14.09.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PixarFilm encoded TIFF image, related to "multiple memory corruption issues."

6.8

CVE-2009-2811

  • EPSS 2.52%
  • Published 14.09.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine featur...

6.8

CVE-2009-2812

  • EPSS 1.74%
  • Published 14.09.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execu...

6

CVE-2009-2813

  • EPSS 0.44%
  • Published 14.09.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle error...