Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-1443 1Apple 1Mac Os X Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation...Show more Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions.Show less
CVE-2006-1442 1Apple 1Mac Os X Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untruste...Show more The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle.Show less
CVE-2006-1441 1Apple 1Mac Os X Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.
CVE-2006-1440 1Apple 1Mac Os X Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links.
CVE-2006-1439 1Apple 1Mac Os X Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard...Show more NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events.Show less
CVE-2006-1465 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file.
CVE-2006-1464 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 (M4P) video format file.
CVE-2006-1463 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a H.264 (M4V) video format file with a certain modified size value.
CVE-2006-1462 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime H.264 (M4V) video format file.
CVE-2006-1461 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash (SWF) file.
CVE-2006-1460 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime movie (.MOV), as demonstrated via a large size for a udta Atom.
CVE-2006-1459 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted QuickTime movie (.MOV).
CVE-2006-1458 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute arbitrary code via a crafted JPEG image.
CVE-2006-1454 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file with malformed image data.
CVE-2006-1453 1Apple 1Quicktime Apr 16, 2026 May 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed font information.
CVE-2006-2277 1Apple 1Mac Os X Apr 16, 2026 May 10, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (application crash) via a crafted OpenEXR (.exr) image file, which triggers the crash when opening a folder u...Show more Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (application crash) via a crafted OpenEXR (.exr) image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file.Show less
CVE-2006-2019 1Apple 1Safari Apr 16, 2026 Apr 25, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute.
CVE-2006-1988 1Apple 1Safari Apr 16, 2026 Apr 21, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list i...Show more The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list item number), which triggers a null dereference in QPainter::drawText, probably due to a failed memory allocation that uses the VALUE.Show less
CVE-2006-1987 1Apple 1Safari Apr 16, 2026 Apr 21, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no...Show more Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which vector is responsible.Show less
CVE-2006-1986 1Apple 1Safari Apr 16, 2026 Apr 21, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an error in KWQListIteratorImpl::KWQListIteratorImpl.

Previous 1...417418419...435 Next