Latest CVE Feed
-
2.1
LOWCVE-2006-1440
BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links.... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1444
CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event S... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-1442
The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle.... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-1450
Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via an enriched text e-mail message with "invalid color information" that causes Mail to allocate and initialize arbitrary classes.... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
6.5
MEDIUMCVE-2006-1448
Finder in Apple Mac OS X 10.3.9 and 10.4.6 allows user-assisted attackers to execute arbitrary code by tricking a user into launching an Internet Location item that appears to use a safe URL scheme, but which actually has a different and more risky scheme... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-1456
Buffer overflow in QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted RTSP request, which is not properly handled during message logging.... Read more
- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2006-1441
Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
6.5
MEDIUMCVE-2006-1443
Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRe... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2006-1439
NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events.... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2006-1457
Safari on Apple Mac OS X 10.4.6, when "Open `safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink.... Read more
- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2006-1446
Keychain in Apple Mac OS X 10.3.9 and 10.4.6 might allow an application to bypass a locked Keychain by first obtaining a reference to the Keychain when it is unlocked, then reusing that reference after the Keychain has been locked.... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
6.5
MEDIUMCVE-2006-1445
Buffer overflow in the FTP server (FTPServer) in Apple Mac OS X 10.3.9 and 10.4.6 allows remote authenticated users to execute arbitrary code via vectors related to "FTP server path name handling."... Read more
Affected Products : mac_os_x- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-1459
Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted QuickTime movie (.MOV).... Read more
Affected Products : quicktime- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-1458
Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute arbitrary code via a crafted JPEG image.... Read more
Affected Products : quicktime- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-1462
Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime H.264 (M4V) video format file.... Read more
Affected Products : quicktime- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-1460
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime movie (.MOV), as demonstrated via a large size for a udta Atom.... Read more
Affected Products : quicktime- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-1463
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a H.264 (M4V) video format file with a certain modified size value.... Read more
Affected Products : quicktime- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-1453
Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed font information.... Read more
Affected Products : quicktime- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-1464
Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 (M4P) video format file.... Read more
Affected Products : quicktime- Published: May. 12, 2006
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2006-1461
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash (SWF) file.... Read more
Affected Products : quicktime- Published: May. 12, 2006
- Modified: Apr. 03, 2025