Vulnerabilities > Apple > MAC OS X > 10.4.5

DATE CVE VULNERABILITY TITLE RISK
2006-06-27 CVE-2006-1468 Multiple Security vulnerability in Retired: Apple Mac OS X
Unspecified vulnerability in Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results, which might allow remote attackers to obtain sensitive information.
network
low complexity
apple
5.0
2006-05-12 CVE-2006-1452 Multiple vulnerability in Apple Mac OS X Security Update 2006-003
Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy.
local
low complexity
apple
4.6
2006-05-10 CVE-2006-2277 Remote Denial Of Service vulnerability in Apple Mac OS X ImageIO OpenEXR Image File
Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (application crash) via a crafted OpenEXR (.exr) image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file.
network
low complexity
apple
5.0
2006-04-21 CVE-2006-1985 Buffer Errors vulnerability in Apple mac OS X, mac OS X Server and Safari
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.
network
high complexity
apple CWE-119
5.1
2006-04-21 CVE-2006-1984 Multiple Security vulnerability in Apple Mac OS X
Unspecified vulnerability in the _cg_TIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKit, allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a null dereference.
network
low complexity
apple
5.0
2006-04-21 CVE-2006-1983 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit.
network
low complexity
apple CWE-119
6.4
2006-04-21 CVE-2006-1982 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images.
network
low complexity
apple CWE-119
7.5
2006-04-21 CVE-2006-1981 Local Security vulnerability in Mac OS X
Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong text field, which might reveal the password to others who can view the screen.
local
low complexity
apple
2.1
2006-04-05 CVE-2006-0401 Local Authentication Bypass vulnerability in Apple Mac OS X Intel-Based
Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors.
local
low complexity
apple
4.6
2006-03-31 CVE-2006-1552 Numeric Errors vulnerability in Apple products
Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".
network
low complexity
apple CWE-189
5.0