Vulnerabilities > Apple > MAC OS X
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-11-10 | CVE-2009-2839 | Resource Management Errors vulnerability in Apple mac OS X and mac OS X Server Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. | 6.8 |
| 2009-11-10 | CVE-2009-2838 | Numeric Errors vulnerability in Apple mac OS X 10.5.8 Integer overflow in QuickLook in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Office document that triggers a buffer overflow. | 6.8 |
| 2009-11-10 | CVE-2009-2837 | Buffer Errors vulnerability in Apple mac OS X 10.5.8/10.6/10.6.1 Heap-based buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image. | 6.8 |
| 2009-11-10 | CVE-2009-2836 | Race Condition vulnerability in Apple mac OS X and mac OS X Server Race condition in Login Window in Apple Mac OS X 10.6.x before 10.6.2, when at least one account has a blank password, allows attackers to bypass password authentication and obtain login access to an arbitrary account via unspecified vectors. | 6.2 |
| 2009-11-10 | CVE-2009-2835 | Improper Input Validation vulnerability in Apple mac OS X and mac OS X Server The kernel in Apple Mac OS X before 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors. | 4.6 |
| 2009-11-10 | CVE-2009-2834 | Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X and mac OS X Server IOKit in Apple Mac OS X before 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors. | 4.9 |
| 2009-11-10 | CVE-2009-2833 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server Buffer overflow in the UCCompareTextDefault API in International Components for Unicode in Apple Mac OS X 10.5.8 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. | 7.5 |
| 2009-11-10 | CVE-2009-2831 | Multiple Security vulnerability in RETIRED: Apple Mac OS X 2009-006 Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a "design issue." low complexity apple | 5.8 |
| 2009-11-10 | CVE-2009-2830 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Common Document Format (CDF) file. | 6.8 |
| 2009-11-10 | CVE-2009-2828 | Resource Management Errors vulnerability in Apple mac OS X and mac OS X Server The server in DirectoryService in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. | 7.5 |