← Back

Mac Os X Server

mac_os_x_server

Vendor: Apple • 655 CVEs

CVEs (655)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-0522
1Apple
1Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
9.0 HIGH· v2
Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to...Show more
Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing.Show less
CVE-2010-0521
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspec...Show more
Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests.Show less
CVE-2010-0520
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file,...Show more
Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file, related to crafted DELTA_FLI chunks and untrusted length values in a .fli file, which are not properly handled during decompression.Show less
CVE-2010-0519
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Strea...Show more
Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value.Show less
CVE-2010-0518
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with Sorenson encoding.
CVE-2010-0517
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, wh...Show more
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields, but to use a different field to control the length of a copy operation.Show less
CVE-2010-0516
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which...Show more
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that of the allocated heap chunk.Show less
CVE-2010-0515
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with H.264 encoding.
CVE-2010-0514
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.261 encoding.
CVE-2010-0513
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PostScript document.
CVE-2010-0512
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group membership, which allows att...Show more
The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group membership, which allows attackers to bypass intended access restrictions by entering login credentials.Show less
CVE-2010-0511
1Apple
1Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is overwritten, which allows attackers to access a workflow via unspecified vectors.
CVE-2010-0510
1Apple
1Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
9.0 HIGH· v2
Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password.
CVE-2010-0509
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
7.2 HIGH· v2
SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts.
CVE-2010-0508
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors.
CVE-2010-0507
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF image.
CVE-2010-0506
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted NEF image.
CVE-2010-0505
1Apple
2Mac Os X
Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to inco...Show more
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function.Show less
CVE-2010-0504
1Apple
1Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVE-2010-0503
1Apple
1Mac Os X Server
Apr 29, 2026
Mar 30, 2010
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.