Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-0138 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration.
CVE-2009-0137 1Apple 1Safari Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL...Show more Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to "input validation issues."Show less
CVE-2009-0020 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 7.8 HIGH· v2 Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that trig...Show more Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption.Show less
CVE-2009-0019 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Remote Apple Events in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) or obtain sensitive information via unspecified vectors that trigger an out-of-bound...Show more Remote Apple Events in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) or obtain sensitive information via unspecified vectors that trigger an out-of-bounds memory access.Show less
CVE-2009-0018 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 7.8 HIGH· v2 The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory.
CVE-2009-0017 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 7.2 HIGH· v2 csregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly handle error conditions, which allows local users to execute arbitrary code via unknown vectors that trigger a heap-based buff...Show more csregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly handle error conditions, which allows local users to execute arbitrary code via unknown vectors that trigger a heap-based buffer overflow.Show less
CVE-2009-0015 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information (filesystem activities and directory names) via unknown vectors related to "cre...Show more Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information (filesystem activities and directory names) via unknown vectors related to "credential management."Show less
CVE-2009-0014 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 2.1 LOW· v2 Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloa...Show more Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder.Show less
CVE-2009-0013 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 2.1 LOW· v2 dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information.
CVE-2009-0012 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string.
CVE-2009-0011 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 7.2 HIGH· v2 Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file.
CVE-2009-0009 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 13, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted movie fi...Show more Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted movie file that triggers memory corruption.Show less
CVE-2009-0142 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Feb 12, 2009 N/A· v4 N/A· v3 1.9 LOW· v2 Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vectors related to "file enumeration logic."
CVE-2009-0321 1Apple 1Safari Apr 23, 2026 Jan 28, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http URI in which the authority (aka hostname) portion is ei...Show more Apple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial of service (infinite loop or access violation) via a link to an http URI in which the authority (aka hostname) portion is either a (1) . (dot) or (2) .. (dot dot) sequence.Show less
CVE-2009-0032 1Apple 1Cups Apr 23, 2026 Jan 27, 2009 N/A· v4 N/A· v3 6.9 MEDIUM· v2 CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary fi...Show more CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi Network Firewall (MNF) 2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pdf.log temporary file.Show less
CVE-2009-0008 1Apple 1Quicktime Mpeg 2 Playback Component Apr 23, 2026 Jan 22, 2009 N/A· v4 N/A· v3 7.6 HIGH· v2 Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted MPEG-2 m...Show more Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted MPEG-2 movie.Show less
CVE-2009-0007 1Apple 1Quicktime Apr 23, 2026 Jan 21, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid im...Show more Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.Show less
CVE-2009-0006 1Apple 1Quicktime Apr 23, 2026 Jan 21, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MD...Show more Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow.Show less
CVE-2009-0005 1Apple 1Quicktime Apr 23, 2026 Jan 21, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that trigg...Show more Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption.Show less
CVE-2009-0004 1Apple 1Quicktime Apr 23, 2026 Jan 21, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file.

Previous 1...389390391...435 Next