Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-4402 1Apple 1Mac Os X Apr 23, 2026 Nov 30, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary code by browsing directories containing crafted .DS_Store files.
CVE-2006-4401 1Apple 1Mac Os X Apr 23, 2026 Nov 30, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary FTP commands via a crafted FTP URI.
CVE-2006-4400 1Apple 1Mac Os X Apr 23, 2026 Nov 30, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and earlier allow user-assisted attackers to execute arbitrary code via crafted font files.
CVE-2006-4398 1Apple 1Mac Os X Apr 23, 2026 Nov 30, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 through 10.4.8 allow local users to execute arbitrary code via crafted service requests.
CVE-2006-4396 1Apple 1Mac Os X Apr 23, 2026 Nov 30, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlin...Show more The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack.Show less
CVE-2006-6130 1Apple 1Mac Os X Apr 23, 2026 Nov 28, 2006 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN ioctl command with a crafted data structure on an AppleTalk socket.
CVE-2006-6129 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Nov 27, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly execute arbitrary code via a crafted Mach-O Universal program that triggers memory corruption.
CVE-2006-6127 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Nov 27, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 Apple Mac OS X kernel allows local users to cause a denial of service via a process that uses kevent to register a queue and an event, then fork a child process that uses kevent to register an event for the same queue as...Show more Apple Mac OS X kernel allows local users to cause a denial of service via a process that uses kevent to register a queue and an event, then fork a child process that uses kevent to register an event for the same queue as the parent.Show less
CVE-2006-6126 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Nov 27, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 Apple Mac OS X allows local users to cause a denial of service (memory corruption) via a crafted Mach-O binary with a malformed load_command data structure.
CVE-2006-6062 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Nov 22, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a malformed UDTO HFS+ disk image, such as with "bad sectors," which trigge...Show more Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a malformed UDTO HFS+ disk image, such as with "bad sectors," which triggers memory corruption.Show less
CVE-2006-6061 1Apple 2Mac Os X Mac Os X Server Apr 23, 2026 Nov 22, 2006 N/A· v4 N/A· v3 9.3 HIGH· v2 com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via a malformed DMG image that triggers memory corruption. NOTE: the severity o...Show more com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via a malformed DMG image that triggers memory corruption. NOTE: the severity of this issue has been disputed by a third party, who states that the impact is limited to a denial of service (kernel panic) due to a vm_fault call with a non-aligned address.Show less
CVE-2006-6015 1Apple 1Mac Os X Apr 23, 2026 Nov 21, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in the JavaScript implementation in Safari on Apple Mac OS X 10.4 allows remote attackers to cause a denial of service (application crash) via a long argument to the exec method of a regular expression.
CVE-2006-4413 1Apple 1Remote Desktop Apr 23, 2026 Nov 18, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client...Show more Apple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which allows local users on an Apple Remote Desktop administration system to modify the packages and gain root privileges on client systems that use the packages.Show less
CVE-2006-5710 2Apple Opendarwin 2Darwin Kernel Mac Os X Apr 23, 2026 Nov 4, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response fram...Show more The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow.Show less
CVE-2006-5328 2Apple Openbase International Ltd 2Openbase Xcode Apr 23, 2026 Oct 17, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file.
CVE-2006-5327 2Apple Openbase International Ltd 2Openbase Xcode Apr 23, 2026 Oct 17, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that referenc...Show more Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase.Show less
CVE-2006-4399 1Apple 1Mac Os X Apr 23, 2026 Oct 3, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo paren...Show more User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, when such an operation is not actually supported, which could result in less secure password management than intended.Show less
CVE-2006-4397 1Apple 1Mac Os X Apr 23, 2026 Oct 3, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Unchecked error condition in LoginWindow in Apple Mac OS X 10.4 through 10.4.7 prevents Kerberos tickets from being destroyed if a user does not successfully log on to a network account from the login window, which might...Show more Unchecked error condition in LoginWindow in Apple Mac OS X 10.4 through 10.4.7 prevents Kerberos tickets from being destroyed if a user does not successfully log on to a network account from the login window, which might allow later users to gain access to the original user's Kerberos tickets.Show less
CVE-2006-4395 1Apple 1Mac Os X Apr 23, 2026 Oct 3, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Unspecified vulnerability in QuickDraw Manager in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows context-dependent attackers to cause a denial of service ("memory corruption" and crash) via a crafted PICT image tha...Show more Unspecified vulnerability in QuickDraw Manager in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows context-dependent attackers to cause a denial of service ("memory corruption" and crash) via a crafted PICT image that is not properly handled by a certain "unsupported QuickDraw operation."Show less
CVE-2006-4394 1Apple 1Mac Os X Apr 23, 2026 Oct 3, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 A logic error in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, allows network accounts without GUIds to bypass service access controls and log into the system using loginwindow via unknown vectors.

Previous 1...413414415...435 Next