Vulnerabilities > Apple > MAC OS X
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-10-03 | CVE-2006-4393 | Multiple Security vulnerability in Apple Mac OS X Pre 10.4.8 Unspecified vulnerability in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, when Fast User Switching is enabled, allows local users to gain access to Kerberos tickets of other users. | 3.7 |
| 2006-10-03 | CVE-2006-4392 | Multiple Security vulnerability in Apple Mac OS X Pre 10.4.8 The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task address space in a way that causes the child to call a parent-controlled function. | 7.2 |
| 2006-10-03 | CVE-2006-4391 | Multiple Security vulnerability in Apple Mac OS X Pre 10.4.8 Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image. | 5.1 |
| 2006-10-03 | CVE-2006-4390 | Multiple Security vulnerability in Apple Mac OS X Pre 10.4.8 CFNetwork in Apple Mac OS X 10.4 through 10.4.7 and 10.3.9 allows remote SSL sites to appear as trusted sites by using encryption without authentication, which can cause the lock icon in Safari to be displayed even when the site's identity cannot be trusted. | 2.6 |
| 2006-10-03 | CVE-2006-4387 | Multiple Security vulnerability in Apple Mac OS X Pre 10.4.8 Apple Mac OS X 10.4 through 10.4.7, when the administrator clears the "Allow user to administer this computer" checkbox in System Preferences for a user, does not remove the user's account from the appserveradm or appserverusr groups, which still allows the user to manage WebObjects applications. | 4.6 |
| 2006-09-27 | CVE-2006-5051 | Double Free vulnerability in multiple products Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free. | 8.1 |
| 2006-09-21 | CVE-2006-3509 | Buffer Overflow vulnerability in Apple Mac OS X AirPort Wireless Driver Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service (crash) or execute arbitrary code in third-party wireless software that uses the API via crafted frames. | 7.2 |
| 2006-09-21 | CVE-2006-3508 | Buffer Overflow vulnerability in Apple Mac OS X AirPort Wireless Driver Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service (crash), gain privileges, and execute arbitrary code via a crafted frame that is not properly handled during scan cache updates. | 7.2 |
| 2006-09-21 | CVE-2006-3507 | Buffer Overflow vulnerability in Apple Mac OS X AirPort Wireless Driver Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by injecting crafted frames into a wireless network. | 7.2 |
| 2006-09-19 | CVE-2006-4887 | Remote Desktop Local Authentication Bypass vulnerability in Apple Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. | 7.2 |