Page 453 of 2317 results (0.014 seconds)

CVSS: 7.5EPSS: 2%CPEs: 32EXPL: 0

automount in Mac OS X 10.4.5 and earlier allows remote file servers to cause a denial of service (unresponsiveness) or execute arbitrary code via unspecified vectors that cause automount to "mount file systems with reserved names". • http://docs.info.apple.com/article.html?artnum=303382 http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html http://secunia.com/advisories/19064 http://securitytracker.com/id?1015709 http://www.osvdb.org/23640 http://www.securityfocus.com/bid/16907 http://www.us-cert.gov/cas/techalerts/TA06-062A.html http://www.vupen.com/english/advisories/2006/0791 https://exchange.xforce.ibmcloud.com/vulnerabilities/25021 •

CVSS: 5.1EPSS: 97%CPEs: 2EXPL: 4

The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension. • https://www.exploit-db.com/exploits/16866 http://docs.info.apple.com/article.html?artnum=303382 http://secunia.com/advisories/18963 http://securitytracker.com/id?1015652 http://www.frsirt.com/exploits/20060222.safari_safefiles_exec.pm.php http://www.heise.de/english/newsticker/news/69862 http://www.kb.cert.org/vuls/id/999708 http://www.mathematik.uni-ulm.de/numerik/staff/lehn/macosx.html http://www.osvdb.org/23510 http://www.securityfocus.com/bid/16736 http:// • CWE-16: Configuration •

CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0

Apple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an undocumented system call. • http://lists.apple.com/archives/security-announce/2006/Feb/msg00000.html http://secunia.com/advisories/18907 http://securitytracker.com/id?1015634 http://www.osvdb.org/23190 http://www.securityfocus.com/bid/16654 http://www.vupen.com/english/advisories/2006/0597 https://exchange.xforce.ibmcloud.com/vulnerabilities/24682 •

CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0

The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by "launching commands into root sessions." • http://docs.info.apple.com/article.html?artnum=301742 http://lists.apple.com/archives/Security-announce/2005/Jun/msg00000.html http://secunia.com/advisories/15481 http://securitytracker.com/id?1014144 http://www.osvdb.org/17266 http://www.securityfocus.com/bid/13899 http://www.vupen.com/english/advisories/2005/0712 https://exchange.xforce.ibmcloud.com/vulnerabilities/20954 •

CVSS: 6.5EPSS: 3%CPEs: 12EXPL: 0

Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authenticated users to execute arbitrary code via long extended attributes. • http://docs.info.apple.com/article.html?artnum=303382 http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html http://secunia.com/advisories/19064 http://www.osvdb.org/23648 http://www.securityfocus.com/bid/16907 http://www.us-cert.gov/cas/techalerts/TA06-062A.html http://www.vupen.com/english/advisories/2006/0791 https://exchange.xforce.ibmcloud.com/vulnerabilities/25029 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •