CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2006-1443
https://notcve.org/view.php?id=CVE-2006-1443
12 May 2006 — Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2006-1444
https://notcve.org/view.php?id=CVE-2006-1444
12 May 2006 — CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 8.8EPSS: 3%CPEs: 2EXPL: 0CVE-2006-1445
https://notcve.org/view.php?id=CVE-2006-1445
12 May 2006 — Buffer overflow in the FTP server (FTPServer) in Apple Mac OS X 10.3.9 and 10.4.6 allows remote authenticated users to execute arbitrary code via vectors related to "FTP server path name handling." • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0CVE-2006-1446
https://notcve.org/view.php?id=CVE-2006-1446
12 May 2006 — Keychain in Apple Mac OS X 10.3.9 and 10.4.6 might allow an application to bypass a locked Keychain by first obtaining a reference to the Keychain when it is unlocked, then reusing that reference after the Keychain has been locked. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 9.8EPSS: 9%CPEs: 4EXPL: 0CVE-2006-1456
https://notcve.org/view.php?id=CVE-2006-1456
12 May 2006 — Buffer overflow in QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted RTSP request, which is not properly handled during message logging. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 7.8EPSS: 4%CPEs: 4EXPL: 0CVE-2006-1455
https://notcve.org/view.php?id=CVE-2006-1455
12 May 2006 — QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to cause a denial of service (crash and connection interruption) via a QuickTime movie with a missing track, which triggers a null dereference. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2006-1442
https://notcve.org/view.php?id=CVE-2006-1442
12 May 2006 — The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0CVE-2006-1447
https://notcve.org/view.php?id=CVE-2006-1447
12 May 2006 — LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 8.8EPSS: 11%CPEs: 2EXPL: 0CVE-2006-1449
https://notcve.org/view.php?id=CVE-2006-1449
12 May 2006 — Integer overflow in Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted MacMIME encapsulated attachment. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-2006-1439
https://notcve.org/view.php?id=CVE-2006-1439
12 May 2006 — NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •