Apple

macOS X Server

655 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2010-1381

  • EPSS 0.35%
  • Veröffentlicht 17.06.2010 16:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The default configuration of SMB File Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, enables support for wide links, which allows remote authenticated users to access arbitrary files via vectors involving symbolic links. NOTE: this might o...

3.5

CVE-2010-1382

  • EPSS 0.32%
  • Veröffentlicht 17.06.2010 16:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote authenticated users to inject arbitrary web script or HTML via crafted Wiki content, related to lack of a charset field.

6.8

CVE-2010-1411

  • EPSS 1.12%
  • Veröffentlicht 17.06.2010 16:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or caus...

6.8

CVE-2010-0515

  • EPSS 2.06%
  • Veröffentlicht 30.03.2010 18:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with H.264 encoding.

6.8

CVE-2010-0516

  • EPSS 3.48%
  • Veröffentlicht 30.03.2010 18:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which triggers memory corruption wh...

6.8

CVE-2010-0517

  • EPSS 3.48%
  • Veröffentlicht 30.03.2010 18:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, which causes QuickTime to calcul...

6.8

CVE-2010-0518

  • EPSS 2.06%
  • Veröffentlicht 30.03.2010 18:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with Sorenson encoding.

6.8

CVE-2010-0519

  • EPSS 5.78%
  • Veröffentlicht 30.03.2010 18:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles f...

6.8

CVE-2010-0520

  • EPSS 9.15%
  • Veröffentlicht 30.03.2010 18:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file, related to crafted DELTA_FLI ...

5

CVE-2010-0521

  • EPSS 0.27%
  • Veröffentlicht 30.03.2010 18:30:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests.