Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2010-03-30 CVE-2010-0512 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X and mac OS X Server
The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group membership, which allows attackers to bypass intended access restrictions by entering login credentials.
network
apple CWE-264
critical
9.3
2010-03-30 CVE-2010-0511 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X Server 10.6.0/10.6.1/10.6.2
Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is overwritten, which allows attackers to access a workflow via unspecified vectors.
network
low complexity
apple CWE-264
5.0
2010-03-30 CVE-2010-0510 Credentials Management vulnerability in Apple mac OS X Server
Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password.
network
low complexity
apple CWE-255
critical
9.0
2010-03-30 CVE-2010-0509 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X and mac OS X Server
SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts.
local
low complexity
apple CWE-264
7.2
2010-03-30 CVE-2010-0508 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors.
network
low complexity
apple
critical
10.0
2010-03-30 CVE-2010-0507 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF image.
network
apple CWE-119
6.8
2010-03-30 CVE-2010-0506 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted NEF image.
network
apple CWE-119
6.8
2010-03-30 CVE-2010-0505 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and mac OS X Server
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function.
network
apple CWE-119
6.8
2010-03-30 CVE-2010-0504 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X Server
Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
network
low complexity
apple CWE-119
7.5
2010-03-30 CVE-2010-0503 Resource Management Errors vulnerability in Apple mac OS X Server
Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
network
low complexity
apple CWE-399
6.5