Vulnerabilities > Apple > MAC OS X Server > 10.6.3

DATE CVE VULNERABILITY TITLE RISK
2010-11-15 CVE-2010-1837 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
CoreText in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a PDF document.
network
apple CWE-119
6.8
2010-11-15 CVE-2010-1836 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Stack-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
network
apple CWE-119
6.8
2010-11-15 CVE-2010-1834 Improper Input Validation vulnerability in Apple mac OS X and mac OS X Server
CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to track users by setting a cookie that is associated with a partial IP address.
network
apple CWE-20
5.8
2010-11-15 CVE-2010-1833 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Apple Type Services (ATS) in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted embedded font in a document.
network
apple CWE-119
6.8
2010-11-15 CVE-2010-1832 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a crafted embedded font in a document.
network
apple CWE-119
6.8
2010-11-15 CVE-2010-1831 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a long name of an embedded font in a document.
network
apple CWE-119
6.8
2010-11-15 CVE-2010-1830 Unspecified vulnerability in Apple mac OS X and mac OS X Server
AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors.
network
low complexity
apple
5.0
2010-11-15 CVE-2010-1829 Path Traversal vulnerability in Apple mac OS X and mac OS X Server
Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitrary code by creating files that are outside the bounds of a share.
network
apple CWE-22
6.0
2010-11-15 CVE-2010-1828 Improper Input Validation vulnerability in Apple mac OS X and mac OS X Server
AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon restart) via crafted reconnect authentication packets.
network
low complexity
apple CWE-20
5.0
2010-11-15 CVE-2010-1803 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify the unique identifier of its remote AFP volume, which allows remote attackers to obtain sensitive information by spoofing this volume.
network
apple
4.3