Page 11 of 257 results (0.003 seconds)

CVSS: 5.5EPSS: 0%CPEs: 14EXPL: 1

CVE-2011-0180 – Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure

https://notcve.org/view.php?id=CVE-2011-0180

23 Mar 2011 — Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call. Desbordamiento de enteros en HFS en Apple Mac OS X antes de v10.6.7 permite a usuarios locales leer archivos (1) HFS, (2) HFS +, o (3) HFS + J por medio de una llamada F_READBOOTSTRAP ioctl manipulada. • https://www.exploit-db.com/exploits/35488 • CWE-189: Numeric Errors •

CVSS: 8.8EPSS: 1%CPEs: 18EXPL: 0

CVE-2011-0181

https://notcve.org/view.php?id=CVE-2011-0181

23 Mar 2011 — Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image. Desbordamiento de enteros en ImageIO en Apple Mac OS X antes de v10.6.7 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (solicitud de bloqueo) a través de una imagen XBM manipulada. • http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html • CWE-189: Numeric Errors •

CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 1

CVE-2011-0182 – Apple Mac OSX < 10.6.7 - Kernel Panic (Denial of Service)

https://notcve.org/view.php?id=CVE-2011-0182

23 Mar 2011 — The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry. La llamada al sistema i386_set_ldt en el núcleo en Apple Mac OS X antes de v10.6.7 no controla correctamente las puertas de llamadas "call gates", que permite a usuarios locales conseguir privilegios a través de vectores que implican la creación de una puerta de entrada de llamadas. • https://www.exploit-db.com/exploits/17901 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0

CVE-2011-0183

https://notcve.org/view.php?id=CVE-2011-0183

23 Mar 2011 — Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service (lockd, statd, mountd, or portmap outage) via a crafted packet, related to an "integer truncation issue." Libinfo en Apple Mac OS X antes de v10.6.7 no controla correctamente un campo entero sin especificar en un paquete NFS RPC, que permite a atacantes remotos provocar una denegación de servicio (lockd, statd, mountd, o corte de portm... • http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html • CWE-189: Numeric Errors •

CVSS: 8.8EPSS: 1%CPEs: 14EXPL: 0

CVE-2011-0184

https://notcve.org/view.php?id=CVE-2011-0184

23 Mar 2011 — QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel spreadsheet with a crafted formula that uses unspecified opcodes. QuickLook en Mac OS X de Apple versiones 10.6 anteriores a 10.6.7, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y bloqueo de aplicación) por medio de una hoja de cálculo de Excel con una fórmu... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=898 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.8EPSS: 1%CPEs: 16EXPL: 0

CVE-2011-0186

https://notcve.org/view.php?id=CVE-2011-0186

23 Mar 2011 — QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image. QuickTime en Apple Mac OS X anterior a v10.6.7 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (corrupción de memoria y bloqueo de la aplicación) a través de una imagen JPEG2000 manipulada • http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.1EPSS: 0%CPEs: 16EXPL: 0

CVE-2011-0187

https://notcve.org/view.php?id=CVE-2011-0187

23 Mar 2011 — The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect. La extensión de QuickTime en Apple Mac OS X antes de v10.6.7 permite a atacantes remotos evitar la política del mismo origen y obtener datos de video potencialmente sensibles a través de vectores que implican redirección de sitios cruzados. • http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 9.8EPSS: 2%CPEs: 38EXPL: 0

CVE-2011-0188 – ruby: memory corruption in BigDecimal on 64bit platforms

https://notcve.org/view.php?id=CVE-2011-0188

23 Mar 2011 — The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue." La función VpMemAlloc en bigdecimal.c en la clase BigDecimal en Ruby v1.9.2-P1... • http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html • CWE-189: Numeric Errors •

CVSS: 5.9EPSS: 0%CPEs: 16EXPL: 0

CVE-2011-0189

https://notcve.org/view.php?id=CVE-2011-0189

23 Mar 2011 — The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulnerabilities. La configuración por defecto de Terminal en Apple Mac OS X v10.6 antes de v10.6.7 utiliza el protocolo SSH versión 1 dentro del cuadro de diálogo Nueva Conexión Remota, lo que podría hacer más fácil para los atacantes "man-in-the-middle" falsificar... • http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html • CWE-16: Configuration •

CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0

CVE-2011-0190

https://notcve.org/view.php?id=CVE-2011-0190

23 Mar 2011 — Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server. Install Helper en Installer de Apple Mac OS X antes de v10.6.7, no procesa correctamente una dirección URL no especificada, lo que podría permitir a atacantes remotos rastrear los inicios de sesión de usuario grabando el tráfico de la red con un a... • http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html • CWE-20: Improper Input Validation •