CVSS: 10.0EPSS: 0%CPEs: 7EXPL: 0CVE-2009-0137
https://notcve.org/view.php?id=CVE-2009-0137
Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to "input validation issues." Vulnerabilidades múltiples no especificadas en Safari RSS en Apple Mac OS X v10.4.11 y v10.5.6, y Windows XP y Vista, que permite a los atacantes remotos ejecutar arbitrariamente JavaScript en la zona de seguridad local a través de una suscripción manipulada: URL, relativa a "asunto de validación de entrada". • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://lists.apple.com/archives/security-announce/2009/Feb/msg00001.html http://support.apple.com/kb/HT3438 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 4EXPL: 0CVE-2009-0140
https://notcve.org/view.php?id=CVE-2009-0140
Unspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote SMB servers to cause a denial of service (memory exhaustion and system shutdown) via a crafted file system name. Vulnerabilidad no especificada en el componente SMB en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los servidores SMB remotos causar una denegación de servicios (agotamiento de memoria y caída del sistema) a través de nombres de ficheros del sistema manipulados. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.vupen.com/english/advisories/2009/0422 • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 13%CPEs: 2EXPL: 0CVE-2009-0012
https://notcve.org/view.php?id=CVE-2009-0012
Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string. Un desbordamiento de búfer en la región heap de la memoria en CoreText en Apple Mac OS X versión 10.5.6,permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena Unicode creada. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://osvdb.org/51977 http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.securityfocus.com/bid/33759 http://www.securityfocus.com/bid/33809 http://www.vupen.com/english/advisories/2009/0422 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 1.9EPSS: 0%CPEs: 2EXPL: 0CVE-2009-0142
https://notcve.org/view.php?id=CVE-2009-0142
Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vectors related to "file enumeration logic." Condición de carrera en AFP Server de Apple Mac OS X v10.5.6, permite a usuarios locales provocar una denegación de servicio (bucle infinito) a través de vectores no especificados relacionados con "lógica en la enumeración de ficheros". • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.securityfocus.com/bid/33759 http://www.securityfocus.com/bid/33812 http://www.vupen.com/english/advisories/2009/0422 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 4.9EPSS: 0%CPEs: 12EXPL: 0CVE-2008-4219
https://notcve.org/view.php?id=CVE-2008-4219
The kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service (infinite loop and system halt) by running an application that is dynamically linked to libraries on an NFS server, related to occurrence of an exception in this application. El núcleo en Apple Mac OS X versiones anteriores a 10.5.6 permite a usuarios locales provocar una denegación de servicio (bucle infinito y parada del sistema) mediante la ejecución de una aplicación que está dinámicamente enlazada a librebrías en un servidor NFS, relacionado con la aparición de una excepción es esta aplicación. • http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html http://secunia.com/advisories/33179 http://support.apple.com/kb/HT3338 http://www.securityfocus.com/bid/32839 http://www.securityfocus.com/bid/32873 http://www.securitytracker.com/id?1021404 http://www.us-cert.gov/cas/techalerts/TA08-350A.html http://www.vupen.com/english/advisories/2008/3444 • CWE-399: Resource Management Errors •