Vulnerabilities > Apple
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2014-02-27 | CVE-2014-1264 | Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X Finder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL information, which allows local users to bypass intended access restrictions in opportunistic circumstances via standard filesystem operations on a file with a damaged ACL. | 3.3 |
2014-02-27 | CVE-2014-1263 | Cryptographic Issues vulnerability in Apple mac OS X curl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used in in Apple OS X 10.9.x before 10.9.2, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate when accessing a URL that uses a numerical IP address, which allows man-in-the-middle attackers to spoof servers via an arbitrary valid certificate. | 4.3 |
2014-02-27 | CVE-2014-1262 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption. | 7.5 |
2014-02-27 | CVE-2014-1261 | Numeric Errors vulnerability in Apple mac OS X Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Unicode font. | 7.5 |
2014-02-27 | CVE-2014-1260 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office document. | 6.8 |
2014-02-27 | CVE-2014-1259 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted filename. | 6.8 |
2014-02-27 | CVE-2014-1258 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X Heap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image. | 6.8 |
2014-02-27 | CVE-2014-1257 | Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation. | 3.6 |
2014-02-27 | CVE-2014-1256 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages. | 7.5 |
2014-02-27 | CVE-2014-1255 | Improper Input Validation vulnerability in Apple mac OS X Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages. | 7.5 |