Vulnerabilities > Apple > MAC OS X > 10.0.0

DATE CVE VULNERABILITY TITLE RISK
2006-11-30 CVE-2006-4400 Multiple Security vulnerability in Apple Mac OS X 2006-007
Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and earlier allow user-assisted attackers to execute arbitrary code via crafted font files.
network
high complexity
apple
5.1
2006-11-30 CVE-2006-4396 Multiple Security vulnerability in Apple Mac OS X 2006-007
The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack.
local
low complexity
apple
4.6
2006-09-27 CVE-2006-5051 Double Free vulnerability in multiple products
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
network
high complexity
openbsd debian apple CWE-415
8.1
2006-09-19 CVE-2006-4887 Remote Desktop Local Authentication Bypass vulnerability in Apple
Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation.
local
low complexity
apple
7.2
2006-09-06 CVE-2006-4095 Reachable Assertion vulnerability in multiple products
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.
network
low complexity
isc canonical apple CWE-617
7.5
2006-07-06 CVE-2006-3356 Denial-Of-Service vulnerability in Mac OS X
The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference.
network
high complexity
apple
2.6
2006-04-21 CVE-2006-1984 Multiple Security vulnerability in Apple Mac OS X
Unspecified vulnerability in the _cg_TIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKit, allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a null dereference.
network
low complexity
apple
5.0
2005-12-31 CVE-2005-2194 TCP/IP Remote Denial Of Service vulnerability in Apple Mac OSX
Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly related to source routing or loose source routing.
network
low complexity
apple
5.0
2005-11-01 CVE-2005-2752 Information Exposure vulnerability in Apple mac OS X and mac OS X Server
An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers to obtain sensitive information, a different vulnerability than CVE-2005-1126 and CVE-2005-1406.
local
low complexity
apple CWE-200
2.1
2005-07-18 CVE-2005-1689 Double Free vulnerability in multiple products
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
network
low complexity
mit apple debian CWE-415
critical
9.8