Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2006-05-12 CVE-2006-1443 Multiple vulnerability in Apple Mac OS X Security Update 2006-003
Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions.
network
low complexity
apple
6.5
2006-05-12 CVE-2006-1442 Multiple vulnerability in Apple Mac OS X Security Update 2006-003
The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle.
network
low complexity
apple
7.5
2006-05-12 CVE-2006-1441 Multiple vulnerability in Apple mac OS X 10.4.6
Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.
network
low complexity
apple
7.5
2006-05-12 CVE-2006-1440 Multiple vulnerability in Apple Mac OS X Security Update 2006-003
BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links.
local
low complexity
apple
2.1
2006-05-12 CVE-2006-1439 Information Exposure vulnerability in Apple mac OS X 10.4.6
NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events.
local
low complexity
apple CWE-200
2.1
2006-05-12 CVE-2006-1465 Integer and Buffer Overflow vulnerability in Apple Quicktime 7.0.3/7.0.4
Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file.
network
high complexity
apple
5.1
2006-05-12 CVE-2006-1464 Integer and Buffer Overflow vulnerability in Apple Quicktime 7.0.3/7.0.4
Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 (M4P) video format file.
network
high complexity
apple
5.1
2006-05-12 CVE-2006-1463 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime 7.0.3/7.0.4
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a H.264 (M4V) video format file with a certain modified size value.
network
high complexity
apple CWE-119
5.1
2006-05-12 CVE-2006-1462 Numeric Errors vulnerability in Apple Quicktime
Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime H.264 (M4V) video format file.
network
high complexity
apple CWE-189
5.1
2006-05-12 CVE-2006-1461 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash (SWF) file.
network
high complexity
apple CWE-119
5.1