Page 222 of 2650 results (0.016 seconds)

CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2007-5971 – krb5: double free in gssapi lib

https://notcve.org/view.php?id=CVE-2007-5971

06 Dec 2007 — Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. Una vulnerabilidad de doble liberación en la función gss_krb5int_make_seal_token_v3 en la biblioteca lib/gssapi/krb5/k5sealv3.c en MIT Kerberos 5 (krb5), presenta un impacto desconocido y vectores de ataques. • http://bugs.gentoo.org/show_bug.cgi?id=199212 • CWE-399: Resource Management Errors •

CVSS: 9.3EPSS: 31%CPEs: 1EXPL: 3

CVE-2007-6165 – Apple Mail.app - Image Attachment Command Execution

https://notcve.org/view.php?id=CVE-2007-6165

29 Nov 2007 — Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment containing an apparently-safe file type and script in a resource fork, which does not warn the user that a separate program is going to be executed. NOTE: this is a regression error related to CVE-2006-0395. Mail en Apple Mac OS X Leopard (versión 10.5.1), permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario por medio de un archivo adjunto AppleDoub... • https://www.exploit-db.com/exploits/16870 • CWE-20: Improper Input Validation CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 9.8EPSS: 96%CPEs: 40EXPL: 8

CVE-2007-6166 – Apple QuickTime 7.2/7.3 - RTSP Response Remote Overwrite (SEH)

https://notcve.org/view.php?id=CVE-2007-6166

29 Nov 2007 — Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote Real Time Streaming Protocol (RTSP) servers to execute arbitrary code via an RTSP response with a long Content-Type header. Un desbordamiento de búfer en la región stack de la memoria en Apple QuickTime anterior a la versión 7.3.1, como es usado en QuickTime Player en Windows XP y Safari en Mac OS X, permite a servidores remotos de Real Time Streaming Protocol (RTSP) e... • https://www.exploit-db.com/exploits/4648 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 10.0EPSS: 28%CPEs: 2EXPL: 0

CVE-2007-4703

https://notcve.org/view.php?id=CVE-2007-4703

15 Nov 2007 — The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, even when "Block incoming connections" has been set for its associated executable, which might allow remote attackers or local root processes to bypass intended access restrictions. El Firewall de Aplicación en Apple Mac OS X versión 10.5, no previene a un proceso de root de aceptar conexiones entrantes, incluso cuando ha sido establecido "Block incoming connections" para su ejecutable asocia... • http://docs.info.apple.com/article.html?artnum=307004 •

CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0

CVE-2007-4704

https://notcve.org/view.php?id=CVE-2007-4704

15 Nov 2007 — The Application Firewall in Apple Mac OS X 10.5 does not apply changed settings to processes that are started by launchd until the processes are restarted, which might allow attackers to bypass intended access restrictions. El Firewall de Aplicación en Apple Mac OS X versión 10.5, no aplica a los ajustes modificados a procesos que son iniciados con launchd hasta que se han reiniciado los procesos, lo que podría permitir a los atacantes omitir las restricciones de acceso previstas. • http://docs.info.apple.com/article.html?artnum=307004 •

CVSS: 9.3EPSS: 27%CPEs: 2EXPL: 0

CVE-2007-4702

https://notcve.org/view.php?id=CVE-2007-4702

15 Nov 2007 — The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restrictions. El Cortafuegos de Aplicación de Apple Mac OS X 10.5, cuando la opción "Bloquear todas las conexiones entrantes" se encuentra habilitada, no impide que procesos de root o mDNSResponder acepten conexiones, lo cual podría permitir a atacant... • http://docs.info.apple.com/article.html?artnum=307004 •

CVSS: 5.5EPSS: 0%CPEs: 20EXPL: 0

CVE-2007-4701

https://notcve.org/view.php?id=CVE-2007-4701

15 Nov 2007 — WebKit on Apple Mac OS X 10.4 through 10.4.10 does not create temporary files securely when Safari is previewing a PDF file, which allows local users to read the contents of that file. WebKit en Apple Mac OS X 10.4 hasta 10.4.10 no crea ficheros temporales de forma segura cuando Safari está previsualizando un fichero PDF, lo cual permite a usuarios locales leer el contenido de ese fichero. • http://docs.info.apple.com/article.html?artnum=307041 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 8.1EPSS: 4%CPEs: 21EXPL: 0

CVE-2007-4699

https://notcve.org/view.php?id=CVE-2007-4699

15 Nov 2007 — The default configuration of Safari in Apple Mac OS X 10.4 through 10.4.10 adds a private key to the keychain with permissions that allow other applications to access the key without warning the user, which might allow other applications to bypass intended access restrictions. La configuración por defecto de Safari en Apple Mac OS X 10.4 hasta 10.4.10 añade una clave privada a la cadena de claves con permisos que permiten a otras aplicaciones acceder a la clave sin avisar al usuario, lo cual podría permitir... • http://docs.info.apple.com/article.html?artnum=307041 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 9.1EPSS: 2%CPEs: 20EXPL: 0

CVE-2007-4700

https://notcve.org/view.php?id=CVE-2007-4700

15 Nov 2007 — Unspecified vulnerability in WebKit on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to use Safari as an indirect proxy and send attacker-controlled data to arbitrary TCP ports via unknown vectors. Vulnerabilidad no especificada en WebKit de Apple Mac OS X 10.4 hasta 10.4.10 permite a atacantes remotos utilizar Safari como si fuera un proxy indirecto y enviar información controlada por el atacante a puertos TCP de su elección mediante vectores desconocidos. • http://docs.info.apple.com/article.html?artnum=307041 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0

CVE-2007-4267

https://notcve.org/view.php?id=CVE-2007-4267

15 Nov 2007 — Stack-based buffer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted IOCTL request that adds an AppleTalk zone to a routing table. Un desbordamiento de búfer en la región stack de la memoria en el componente Networking en Apple Mac OS X versiones 10.4 hasta 10.4.10, permite a usuarios locales ejecutar código arbitrario por medio de una petición IOCTL diseñada que agrega una zona de AppleTalk en una tabla de enrutamiento. • http://docs.info.apple.com/article.html?artnum=307041 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •