CVSS: 7.2EPSS: 0%CPEs: 6EXPL: 0CVE-2004-0822
https://notcve.org/view.php?id=CVE-2004-0822
Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable. • http://secunia.com/advisories/12491 http://www.ciac.org/ciac/bulletins/o-212.shtml http://www.kb.cert.org/vuls/id/545446 http://www.securityfocus.com/advisories/7148 http://www.securityfocus.com/bid/11136 https://exchange.xforce.ibmcloud.com/vulnerabilities/17295 •
CVSS: 5.0EPSS: 0%CPEs: 28EXPL: 0CVE-2004-0743
https://notcve.org/view.php?id=CVE-2004-0743
Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak. Safari para Mac OS X anteriores a 10.3.5, despues de enviar datos de formualarios con el método POST, puede reenviar los datos a un método GET si esa URL es redirigida después de que los datos POST y el usuario utiliza los botones "Atrás" y "Adelante", lo que puede causar un filtrado de información. • http://lists.apple.com/mhonarc/security-announce/msg00056.html http://www.kb.cert.org/vuls/id/128414 https://exchange.xforce.ibmcloud.com/vulnerabilities/16944 •
CVSS: 5.0EPSS: 1%CPEs: 28EXPL: 0CVE-2004-0744
https://notcve.org/view.php?id=CVE-2004-0744
The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet. El componente de red TCP/IP de Mac OS X anteriores a 10.3.5 permite a atacantes remotos causar una denegación de servicio (consumición de recursos) mediante un "Ataque de Rosa" en el que se usan ciertos fragmentos IP. • http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt http://marc.info/?l=bugtraq&m=108075899619193&w=2 http://marc.info/?l=bugtraq&m=108308604119618&w=2 http://www.auscert.org.au/render.html?it=4291 https://exchange.xforce.ibmcloud.com/vulnerabilities/16946 •
CVSS: 2.1EPSS: 0%CPEs: 3EXPL: 0CVE-2004-0622
https://notcve.org/view.php?id=CVE-2004-0622
Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory. Mac OS 10.3.4 no limpia adecuadamente la memoria de contraseñas de inicio de sesión de usuario, de Keychain o FileVault, lo que podría permitir al usuario root o a un atacante con acceso físico obtener información sensible leyendo la memoria. • http://citp.princeton.edu/pub/coldboot.pdf http://marc.info/?l=bugtraq&m=108819559925981&w=2 http://www.securityfocus.com/archive/1/488930/100/100/threaded http://www.securityfocus.com/archive/1/488948/100/100/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/16557 •
CVSS: 10.0EPSS: 1%CPEs: 4EXPL: 0CVE-2004-0539
https://notcve.org/view.php?id=CVE-2004-0539
The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code. El botón "Show in Finder" en el navegador web Safari de Mac OS X 10.3.4 y 10.2.8 puede ejecutar aplicaciones descargadas, lo que pódría permitir a atacantes remotos ejecutar código arbitrario. • http://docs.info.apple.com/article.html?artnum=25785 http://www.kb.cert.org/vuls/id/773190 •