Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-4217 1Apple 1Mac Os X Server Apr 16, 2026 Dec 14, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$<" variable to set uid, which allows attackers to gain privileges.
CVE-2005-4092 1Apple 2Itunes Quicktime Apr 16, 2026 Dec 8, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov fil...Show more Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource atom with a large size value, or (2) an stsd atom with a modified Sample Description Table size value, and possibly other vectors involving media files. NOTE: item 1 was originally identified by CVE-2005-4127 for a pre-patch announcement, and item 2 was originally identified by CVE-2005-4128 for a pre-patch announcement.Show less
CVE-2005-3705 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Dec 1, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in WebKit in Mac OS X and OS X Server 10.3.9 and 10.4.3, as used in applications such as Safari, allows remote attackers to execute arbitrary code via unknown attack vectors.
CVE-2005-3704 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Dec 1, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 System log server in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to spoof syslog messages in log files by injecting various control characters such as newline (NL).
CVE-2005-3702 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Dec 1, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name.
CVE-2005-3701 1Apple 1Mac Os X Server Apr 16, 2026 Dec 1, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in passwordserver in Mac OS X Server 10.3.9 and 10.4.3, when creating an Open Directory master server, allows local users to gain privileges via unknown attack vectors.
CVE-2005-3700 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Dec 1, 2005 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Unknown vulnerability in iodbcadmintool in the ODBC Administrator utility in Mac OS X and OS X Server 10.3.9 and 10.4.3 allows local users to execute arbitrary code via unknown attack vectors.
CVE-2005-2757 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Dec 1, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving "validation of URLs."
CVE-2005-3897 1Apple 1Safari Apr 16, 2026 Nov 29, 2005 N/A· v4 N/A· v3 7.8 HIGH· v2 Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload event that calls the window function.
CVE-2005-2938 1Apple 1Itunes Apr 16, 2026 Nov 18, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.
CVE-2005-2756 1Apple 1Quicktime Apr 16, 2026 Nov 5, 2005 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Apple QuickTime before 7.0.3 allows user-assisted attackers to overwrite memory and execute arbitrary code via a crafted PICT file that triggers an overflow during expansion.
CVE-2005-2755 1Apple 1Quicktime Apr 16, 2026 Nov 5, 2005 N/A· v4 N/A· v3 2.6 LOW· v2 Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service (crash) via a crafted file with a missing movie attribute, which leads to a null dereference.
CVE-2005-2754 1Apple 1Quicktime Apr 16, 2026 Nov 5, 2005 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file with "Improper movie attributes."
CVE-2005-2753 1Apple 1Quicktime Apr 16, 2026 Nov 5, 2005 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Integer overflow in Apple QuickTime before 7.0.3 allows user-assisted attackers to execute arbitrary code via a crafted MOV file that causes a sign extension of the length element in a Pascal style string.
CVE-2005-2752 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Nov 1, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers to obtain sensitive information, a different vulnerability than CVE-2005-1126 a...Show more An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers to obtain sensitive information, a different vulnerability than CVE-2005-1126 and CVE-2005-1406.Show less
CVE-2005-2751 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Nov 1, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with changes in group membership, which could allow users to access files and other resources after they ha...Show more memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with changes in group membership, which could allow users to access files and other resources after they have been removed from a group.Show less
CVE-2005-2750 1Apple 1Mac Os X Server Apr 16, 2026 Nov 1, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the updates, which could prevent important, security-relevant updates from being ins...Show more Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the updates, which could prevent important, security-relevant updates from being installed.Show less
CVE-2005-2749 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Nov 1, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownership information. NOTE: it is not clear whether this issue satisfies the CVE defin...Show more Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownership information. NOTE: it is not clear whether this issue satisfies the CVE definition of a vulnerability.Show less
CVE-2005-2739 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Nov 1, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.
CVE-2005-2746 1Apple 2Mac Os X Mac Os X Server Apr 16, 2026 Oct 26, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which could cause Mail.app to include decrypted message contents for encrypted messages.

Previous 1...420421422...435 Next