Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-0186 1Apple 2Mac Os X Quicktime Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.
CVE-2011-0184 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel spreadsheet with a crafted formula that...Show more QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel spreadsheet with a crafted formula that uses unspecified opcodes.Show less
CVE-2011-0183 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service (lockd, statd, mountd, or portmap outage) via...Show more Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service (lockd, statd, mountd, or portmap outage) via a crafted packet, related to an "integer truncation issue."Show less
CVE-2011-0182 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry.
CVE-2011-0181 1Apple 3Imageio Mac Os XMac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image.
CVE-2011-0180 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 2.1 LOW· v2 Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.
CVE-2011-0179 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document that contains a crafted embedded font.
CVE-2011-0178 1Apple 3Carboncore Mac Os XMac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 2.1 LOW· v2 The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive in...Show more The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.Show less
CVE-2011-0177 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.
CVE-2011-0176 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font.
CVE-2011-0175 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font.
CVE-2011-0174 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font.
CVE-2011-0173 1Apple 3Applescript Mac Os XMac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifi...Show more Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in a dialog in an AppleScript Studio application.Show less
CVE-2011-0172 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Mar 23, 2011 N/A· v4 N/A· v3 4.9 MEDIUM· v2 AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-...Show more AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162.Show less
CVE-2011-1418 1Apple 3Apple Tv Iphone OsTvos Apr 29, 2026 Mar 11, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier...Show more The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses.Show less
CVE-2011-0169 1Apple 2Safari Webkit Apr 29, 2026 Mar 11, 2011 N/A· v4 N/A· v3 2.6 LOW· v2 WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Po...Show more WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.Show less
CVE-2011-0167 1Apple 2Safari Webkit Apr 29, 2026 Mar 11, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
CVE-2011-0166 1Apple 2Safari Webkit Apr 29, 2026 Mar 11, 2011 N/A· v4 N/A· v3 5.8 MEDIUM· v2 The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of...Show more The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778.Show less
CVE-2011-0163 1Apple 3Iphone Os SafariWebkit Apr 29, 2026 Mar 11, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted...Show more WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-poisoning attack.Show less
CVE-2011-0162 1Apple 3Apple Tv Iphone OsTvos Apr 29, 2026 Mar 11, 2011 N/A· v4 N/A· v3 7.8 HIGH· v2 Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the l...Show more Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the local wireless network.Show less

Previous 1...358359360...435 Next