CVSS: 7.8EPSS: 3%CPEs: 1EXPL: 0CVE-2007-0318
https://notcve.org/view.php?id=CVE-2007-0318
18 Jan 2007 — The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service (kernel panic) via a crafted HFS+ filesystem in a DMG image, which causes an access of an invalid vnode structure during file removal. La función do_hfs_truncate en el Mac OS X 10.4.8 permite a atacantes dependientes del entorno provocar una denegación de servicio (kernel panic) mediante la manipulación del sistema de archivos HFS+ en una imagen DMG, lo que provoca el acceso de una estructura vnod... • http://docs.info.apple.com/article.html?artnum=305214 •
CVSS: 7.1EPSS: 2%CPEs: 1EXPL: 0CVE-2007-0299
https://notcve.org/view.php?id=CVE-2007-0299
17 Jan 2007 — Integer overflow in the byte_swap_sbin function in bsd/ufs/ufs/ufs_byte_order.c in Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service (kernel panic) by mounting a crafted Unix File System (UFS) DMG image, which triggers an invalid pointer dereference. Desbordamiento de entero en la función byte_swap_sbin de bsd/ufs/ufs/ufs_byte_order.c en Mac OS X 10.4.8 permite a atacantes remotos con la complicidad del usuario provocar una denegación de servicio (kernel panic) montando una ... • http://docs.info.apple.com/article.html?artnum=305214 •
CVSS: 6.6EPSS: 0%CPEs: 2EXPL: 1CVE-2007-0267 – Apple Mac OSX 10.4.8 - DMG UFS UFS_LookUp Denial of Service
https://notcve.org/view.php?id=CVE-2007-0267
17 Jan 2007 — The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by mounting a crafted UNIX File System (UFS) DMG image that contains a corrupted directory entry (struct direct), related to the ufs_dirbad function. NOTE: a third party states that the FreeBSD issue does not cross privilege boundaries. La función ufs_lookup en los kernel de Mac OS X versión 10.4.8 y FreeBSD versión 6.1, permite a los us... • https://www.exploit-db.com/exploits/29452 • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 65%CPEs: 1EXPL: 1CVE-2007-0236 – Apple Mac OSX 10.4.8 - AppleTalk 'ATPsndrsp()' Heap Buffer Overflow (PoC)
https://notcve.org/view.php?id=CVE-2007-0236
16 Jan 2007 — Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (kernel panic) and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow. Vulnerabilidad de doble liberación en la función _ATPsndrsp en Apple Mac OS X versión 10.4.8, y posiblemente otras versiones, permite a atacantes remotos causar una denegación de servicio (pánico del kernel) y posiblemente e... • https://www.exploit-db.com/exploits/3130 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 95%CPEs: 3EXPL: 2CVE-2007-0229 – Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow
https://notcve.org/view.php?id=CVE-2007-0229
13 Jan 2007 — Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted DMG image that causes "allocation of a negative size buffer" leading to a heap-based buffer overflow, a related issue to CVE-2006-5679. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem. Un desbordamiento de enteros en la función ffs_mountfs en Mac OS ... • https://www.exploit-db.com/exploits/29441 • CWE-189: Numeric Errors •
CVSS: 8.8EPSS: 96%CPEs: 2EXPL: 2CVE-2007-0197 – Apple Mac OSX 10.4.8 - Apple Finder DMG Volume Name Memory Corruption (PoC)
https://notcve.org/view.php?id=CVE-2007-0197
11 Jan 2007 — Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long volume name in a DMG disk image, which results in memory corruption. Finder 10.4.6 de Apple Mac OS X 10.4.8 permite a atacantes remotos con la complicidad del usuario provocar una denegación de servicio y posiblemente ejecutar código de su elección mediante un nombre de volumen largo en una imagen de disco DMG, que provoca una corrupción de memoria. • https://www.exploit-db.com/exploits/3110 • CWE-20: Improper Input Validation CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 3CVE-2007-0117 – Apple Mac OSX 10.4.8 - DiskManagement BOM 'cron' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2007-0117
09 Jan 2007 — DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials (BOM) files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file permission changes upon execution of a diskutil permission repair operation. DiskManagementTool en el DiskManagement.framework 92.29 de Mac OS X 10.4.8 no valida adecuadamente archivos de Factura de Materiales (Bill of Materials o BIM), lo cual permite a los atacan... • https://www.exploit-db.com/exploits/3088 •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2006-6900
https://notcve.org/view.php?id=CVE-2006-6900
31 Dec 2006 — Unspecified vulnerability in the Bluetooth stack in Apple Mac OS 10.4 has unknown impact and attack vectors, related to an "implementation bug." Vulnerabilidad no sepecificada en la pila Bluetooth en Apple Mac OS 10.4 tiene impacto y vectores de ataque desconocidos, relacionados con un "bug de implementación". • http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf •
CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 0CVE-2006-6906
https://notcve.org/view.php?id=CVE-2006-6906
31 Dec 2006 — Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and earlier has unknown impact and local attack vectors, related to "Mach Exception Handling", a different issue than CVE-2006-6900. Vulnerabilidad no especificada en la pila Bluetooth de Mac OS 10.4.7 y anteriores tiene impacto y vectores de ataque locales desconocidos, relacionados con el "manejo de excepciones Mach", un problema distinto de CVE-2006-????. • http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf •
CVSS: 7.5EPSS: 0%CPEs: 18EXPL: 0CVE-2006-5681
https://notcve.org/view.php?id=CVE-2006-5681
20 Dec 2006 — QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects. QuickTime para Java en Mac OS X 10.4 hasta 10.4.8, cuando es usado con Quartz Composer, permite a atacantes remotos obtener información sensible (imágenes de la pantalla) mediante un applet de Java que accede a imágenes que han sido renderizadas por otros ... • http://docs.info.apple.com/article.html?artnum=304916 •