CVSS: 5.5EPSS: 0%CPEs: 114EXPL: 5CVE-2009-1237 – Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service
https://notcve.org/view.php?id=CVE-2009-1237
02 Apr 2009 — Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call. Múltiples fugas de memoria en XNU v1228.3.13 y anteriores en Apple Mac OS X v10.5.6 y anteriores permite a usuarios locales producir una denegación de servicio (consumo de memoria del kernel) a traves de llamadas de sistema (1) SYS_add_profil o (2) SYS___mac_getfsstat manipul... • https://www.exploit-db.com/exploits/8263 • CWE-399: Resource Management Errors •
CVSS: 7.2EPSS: 0%CPEs: 114EXPL: 3CVE-2009-1238 – Apple Mac OSX xnu 1228.x - 'vfssysctl' Local Kernel Denial of Service (PoC)
https://notcve.org/view.php?id=CVE-2009-1238
02 Apr 2009 — Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable. Condición de carrera en el interfaz HFS vfs sysctl en XNU v1228.8.20 y anteriores en Apple Mac OS X v10.5.6 y anteriores permite a usuarios loc... • https://www.exploit-db.com/exploits/8265 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.8EPSS: 2%CPEs: 4EXPL: 0CVE-2009-0009
https://notcve.org/view.php?id=CVE-2009-0009
13 Feb 2009 — Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted movie file that triggers memory corruption. Vulnerabilidad no especificada en Pixlet codec en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) y posiblemente una ejecución arbitraria de código a través de archivos... • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2009-0011
https://notcve.org/view.php?id=CVE-2009-0011
13 Feb 2009 — Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file. Certificate Assistant en Apple Mac OS X v10.5.6 que permite a los usuarios locales sobrescribir arbitrariamente archivos a través de vectores desconocidos en relación a una "operación de archivo insegura" en un fichero temporal. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 8%CPEs: 2EXPL: 0CVE-2009-0012
https://notcve.org/view.php?id=CVE-2009-0012
13 Feb 2009 — Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string. Un desbordamiento de búfer en la región heap de la memoria en CoreText en Apple Mac OS X versión 10.5.6,permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena Unicode creada. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2009-0013
https://notcve.org/view.php?id=CVE-2009-0013
13 Feb 2009 — dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information. dscl en DS Tools den Apple Mac OS X v10.4.11 y v10.5.6, requiere que la contraseña sea proporcionada como argumentos de la línea de comandos, esto permite a usuarios locales ganar privilegios al listar información de los procesos. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html • CWE-255: Credentials Management Errors •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2009-0014
https://notcve.org/view.php?id=CVE-2009-0014
13 Feb 2009 — Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended access restrictions and read the Downloads folder. Folder Manager en Apple Mac OS X 10.5.6 usa permisos inseguros por defecto cuando recrea un carpeta Downloads después de que ha sido borrada, lo que permite a los usuarios evitar las restricciones de acceso y lee la carpeta Downloads. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2009-0015
https://notcve.org/view.php?id=CVE-2009-0015
13 Feb 2009 — Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information (filesystem activities and directory names) via unknown vectors related to "credential management." Vulnerabilidad no especificada en fseventsd en the FSEvents framework en Apple Mac OS X v10.5.6 que permite a los usuarios locales obtener información sensible (actividades de los ficheros del sistema y nombres de directorios) a través de vectores desconocidos relativos ... • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html • CWE-255: Credentials Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2009-0017
https://notcve.org/view.php?id=CVE-2009-0017
13 Feb 2009 — csregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly handle error conditions, which allows local users to execute arbitrary code via unknown vectors that trigger a heap-based buffer overflow. csregprinter en el componente Printing de Apple Mac OS X v10.4.11 y v10.5.6, no maneja adecuadamente las condiciones de error, esto permite a usuarios locales ejecutar código de su elección a través de vectores desconocidos que provocan un desbordamiento del búfer basado en mont... • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2009-0018
https://notcve.org/view.php?id=CVE-2009-0018
13 Feb 2009 — The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory. The Remote Apple Events server en Apple Mac OS X 10.4.11 y 10.5.6 no inicializa apropiadamente un búfer, lo cual permite a los atacantes remotos leer porciones de memoria. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •