Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-3744 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers...Show more Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet.Show less
CVE-2007-2410 1Apple 1Webcore Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 WebCore on Apple Mac OS X 10.3.9 and 10.4.10 retains properties of certain global objects when a new URL is visited in the same window, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
CVE-2007-2409 1Apple 1Webcore Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-domain vulnerability in WebCore on Apple Mac OS X 10.3.9 and 10.4.10 allows remote attackers to obtain sensitive information via a popup window, which is able to read the current URL of the parent window.
CVE-2007-2406 1Apple 1Quartz Composer Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Quartz Composer on Apple Mac OS X 10.4.10 does not initialize a certain object pointer, which might allow user-assisted remote attackers to execute arbitrary code via a crafted Quartz Composer file.
CVE-2007-2405 1Apple 1Pdfkit Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file.
CVE-2007-2404 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an...Show more CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an unspecified context. NOTE: this can be leveraged for cross-site scripting (XSS) attacks.Show less
CVE-2007-2403 1Apple 1Cfnetwork Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.
CVE-2007-3387 6Apple CanonicalDebian+3 more 6Cups Debian LinuxGpdf+3 more Apr 23, 2026 Jul 30, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might all...Show more Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.Show less
CVE-2007-4045 2Apple Fedoraproject 2Cups Fedora Apr 23, 2026 Jul 27, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that intr...Show more The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation.Show less
CVE-2007-3944 1Apple 3Iphone Os SafariWebkit Apr 23, 2026 Jul 23, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, allow remote attacker...Show more Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, allow remote attackers to execute arbitrary code via certain JavaScript regular expressions. NOTE: this issue was originally reported only for MobileSafari on the iPhone. NOTE: it is not clear whether this stems from an issue in the original distribution of PCRE, which might already have a separate CVE identifier.Show less
CVE-2007-3828 1Apple 1Mac Os X Apr 23, 2026 Jul 17, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in mDNSResponder in Apple Mac OS X allows remote attackers to execute arbitrary code via unspecified vectors, a related issue to CVE-2007-2386.
CVE-2007-3798 6Apple CanonicalDebian+3 more 7Debian Linux FreebsdMac Os X+4 more Apr 23, 2026 Jul 16, 2007 N/A· v4 9.8 CRITICAL· v3 6.8 MEDIUM· v2 Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
CVE-2007-2402 1Apple 1Quicktime Apr 23, 2026 Jul 15, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.
CVE-2007-2397 1Apple 1Quicktime Apr 23, 2026 Jul 15, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets.
CVE-2007-2396 1Apple 1Quicktime Apr 23, 2026 Jul 15, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.
CVE-2007-2394 1Apple 1Quicktime Apr 23, 2026 Jul 15, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to imprope...Show more Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.Show less
CVE-2007-2393 1Apple 1Quicktime Apr 23, 2026 Jul 15, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.
CVE-2007-2392 1Apple 1Quicktime Apr 23, 2026 Jul 15, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption.
CVE-2007-3718 1Apple 1Safari Apr 23, 2026 Jul 12, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was releas...Show more Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was released by a reliable researcher.Show less
CVE-2007-3514 1Apple 1Safari Apr 23, 2026 Jul 3, 2007 N/A· v4 N/A· v3 8.5 HIGH· v2 Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document varia...Show more Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute to a file:// location, a different vector than CVE-2007-3482.Show less

Previous 1...406407408...435 Next