Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2013-06-05 CVE-2013-1009 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Safari
WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1023.
network
apple CWE-119
6.8
2013-06-05 CVE-2013-0990 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X and mac OS X Server
SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors.
network
apple CWE-264
4.9
2013-06-05 CVE-2013-0985 Improper Authentication vulnerability in Apple mac OS X
Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to cause a denial of service (loss of encryption functionality) via an unspecified command line.
local
low complexity
apple CWE-287
2.1
2013-06-05 CVE-2013-0984 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted message.
network
apple CWE-119
critical
9.3
2013-06-05 CVE-2013-0983 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X
Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text glyph in a URL encountered by Safari.
network
apple CWE-119
6.8
2013-06-05 CVE-2013-0982 Information Exposure vulnerability in Apple mac OS X and mac OS X Server
The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation.
local
low complexity
apple CWE-200
1.7
2013-06-05 CVE-2013-0975 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
network
apple CWE-119
6.8
2013-05-24 CVE-2013-1022 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted mvhd atoms in a movie file.
network
apple microsoft CWE-119
critical
9.3
2013-05-24 CVE-2013-1021 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Quicktime
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG data in a movie file.
network
apple microsoft CWE-119
critical
9.3
2013-05-24 CVE-2013-1020 Resource Management Errors vulnerability in Apple Quicktime
Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG data in a movie file.
network
apple microsoft CWE-399
critical
9.3