10.5

DATE	CVE	VULNERABILITY TITLE	RISK
2007-03-05	CVE-2007-0712	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MIDI file. network apple microsoft CWE-119 critical	9.3
2004-12-06	CVE-2004-0622	Information Disclosure vulnerability in Apple mac OS X 10.3.4/10.4/10.5 Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory. local low complexity apple	2.1