Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-0154 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 May 13, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format (CFF) font.
CVE-2009-0153 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 May 13, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and pos...Show more International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.Show less
CVE-2009-0152 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 May 13, 2009 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain s...Show more iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network.Show less
CVE-2009-0150 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 May 13, 2009 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image.
CVE-2009-0149 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 May 13, 2009 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image that triggers memory corruption.
CVE-2009-0145 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 May 13, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (a...Show more CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers memory corruption.Show less
CVE-2009-0144 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 May 13, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are...Show more CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections.Show less
CVE-2009-0010 1Apple 1Mac Os X Apr 23, 2026 May 13, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash...Show more Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a crafted 0x77 Poly tag and a crafted length field, which triggers a heap-based buffer overflow.Show less
CVE-2008-1517 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 May 13, 2009 N/A· v4 N/A· v3 7.2 HIGH· v2 Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (system shutdown) via unspecified vectors related to workqueues.
CVE-2009-1600 1Apple 1Safari Apr 23, 2026 May 11, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acro...Show more Apple Safari executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI. NOTE: the researcher reports that Adobe's position is "a PDF file is active content."Show less
CVE-2009-0164 1Apple 1Cups Apr 23, 2026 Apr 24, 2009 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
CVE-2009-1183 4Apple FoolabsGlyphandcog+1 more 4Cups PopplerXpdf+1 more Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.
CVE-2009-1182 4Apple FoolabsGlyphandcog+1 more 4Cups PopplerXpdf+1 more Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2009-1181 4Apple FoolabsGlyphandcog+1 more 4Cups PopplerXpdf+1 more Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL po...Show more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.Show less
CVE-2009-1180 4Apple FoolabsGlyphandcog+1 more 4Cups PopplerXpdf+1 more Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid da...Show more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.Show less
CVE-2009-1179 4Apple FoolabsGlyphandcog+1 more 4Cups PopplerXpdf+1 more Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2009-0800 4Apple FoolabsGlyphandcog+1 more 4Cups PopplerXpdf+1 more Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF fil...Show more Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.Show less
CVE-2009-0799 4Apple FoolabsGlyphandcog+1 more 4Cups PopplerXpdf+1 more Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of...Show more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.Show less
CVE-2009-0195 3Apple FoolabsGlyphandcog 3Cups XpdfXpdfreader Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products, allows remote attackers to execute arbitrary code via a PDF file with crafted JBIG2 symbol dictionary segments.
CVE-2009-0166 4Apple FoolabsGlyphandcog+1 more 4Cups PopplerXpdf+1 more Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.

Previous 1...387388389...435 Next