CVSS: 9.8EPSS: 9%CPEs: 2EXPL: 0CVE-2006-1450
https://notcve.org/view.php?id=CVE-2006-1450
12 May 2006 — Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via an enriched text e-mail message with "invalid color information" that causes Mail to allocate and initialize arbitrary classes. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0CVE-2006-1452
https://notcve.org/view.php?id=CVE-2006-1452
12 May 2006 — Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2006-1448
https://notcve.org/view.php?id=CVE-2006-1448
12 May 2006 — Finder in Apple Mac OS X 10.3.9 and 10.4.6 allows user-assisted attackers to execute arbitrary code by tricking a user into launching an Internet Location item that appears to use a safe URL scheme, but which actually has a different and more risky scheme. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2006-1457
https://notcve.org/view.php?id=CVE-2006-1457
12 May 2006 — Safari on Apple Mac OS X 10.4.6, when "Open `safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 8.8EPSS: 11%CPEs: 1EXPL: 0CVE-2006-1441
https://notcve.org/view.php?id=CVE-2006-1441
12 May 2006 — Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0CVE-2006-1447
https://notcve.org/view.php?id=CVE-2006-1447
12 May 2006 — LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2006-1443
https://notcve.org/view.php?id=CVE-2006-1443
12 May 2006 — Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2006-1444
https://notcve.org/view.php?id=CVE-2006-1444
12 May 2006 — CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 8.8EPSS: 11%CPEs: 2EXPL: 0CVE-2006-1449
https://notcve.org/view.php?id=CVE-2006-1449
12 May 2006 — Integer overflow in Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted MacMIME encapsulated attachment. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html •
CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-2006-1439
https://notcve.org/view.php?id=CVE-2006-1439
12 May 2006 — NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events. • http://lists.apple.com/archives/security-announce/2006/May/msg00003.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •