CVE-2009-0012
https://notcve.org/view.php?id=CVE-2009-0012
Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string. Un desbordamiento de búfer en la región heap de la memoria en CoreText en Apple Mac OS X versión 10.5.6,permite a los atacantes remotos ejecutar código arbitrario por medio de una cadena Unicode creada. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://osvdb.org/51977 http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.securityfocus.com/bid/33759 http://www.securityfocus.com/bid/33809 http://www.vupen.com/english/advisories/2009/0422 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2009-0138
https://notcve.org/view.php?id=CVE-2009-0138
servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration. servermgrd (Server Manager) en Apple Mac OS X v10.5.6 no valida apropiadamente la autenticación de credenciales, el cual permite a los atacantes remotos modificar el sistema de configuración. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.securityfocus.com/bid/33759 http://www.securityfocus.com/bid/33813 http://www.vupen.com/english/advisories/2009/0422 • CWE-287: Improper Authentication •
CVE-2009-0139
https://notcve.org/view.php?id=CVE-2009-0139
Integer overflow in the SMB component in Apple Mac OS X 10.5.6 allows remote SMB servers to cause a denial of service (system shutdown) or execute arbitrary code via a crafted SMB file system that triggers a heap-based buffer overflow. Desbordamiento de entero en el componente SMB en Apple Mac OS X v10.5.6 que permite a los servidores remotos SMB causar una denegación de servicios (caída del sistema) o ejecutar arbitrariamente código a través de archivos de sistemas SMB manipulados que lanzan un un desbordamiento de búfer basado en pila. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.vupen.com/english/advisories/2009/0422 • CWE-189: Numeric Errors •
CVE-2009-0019
https://notcve.org/view.php?id=CVE-2009-0019
Remote Apple Events in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) or obtain sensitive information via unspecified vectors that trigger an out-of-bounds memory access. Remote Apple Events en Apple Mac OS X v10.4.11 y v10.5.6 que permite a los atacantes remotos causar una denegación de servicios (terminación de la aplicación) u obtener información sensible a través de vectores no especificados que lanzan un acceso a memoria fuera de rango. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://support.apple.com/kb/HT3438 http://www.securityfocus.com/bid/33759 http://www.securityfocus.com/bid/33814 http://www.vupen.com/english/advisories/2009/0422 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2009-0017
https://notcve.org/view.php?id=CVE-2009-0017
csregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly handle error conditions, which allows local users to execute arbitrary code via unknown vectors that trigger a heap-based buffer overflow. csregprinter en el componente Printing de Apple Mac OS X v10.4.11 y v10.5.6, no maneja adecuadamente las condiciones de error, esto permite a usuarios locales ejecutar código de su elección a través de vectores desconocidos que provocan un desbordamiento del búfer basado en montículo. • http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.securityfocus.com/bid/33759 http://www.securityfocus.com/bid/33811 http://www.vupen.com/english/advisories/2009/0422 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •