Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2006-09-21 CVE-2006-3509 Buffer Overflow vulnerability in Apple Mac OS X AirPort Wireless Driver
Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service (crash) or execute arbitrary code in third-party wireless software that uses the API via crafted frames.
local
low complexity
apple
7.2
2006-09-21 CVE-2006-3508 Buffer Overflow vulnerability in Apple Mac OS X AirPort Wireless Driver
Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service (crash), gain privileges, and execute arbitrary code via a crafted frame that is not properly handled during scan cache updates.
local
low complexity
apple
7.2
2006-09-21 CVE-2006-3507 Buffer Overflow vulnerability in Apple Mac OS X AirPort Wireless Driver
Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by injecting crafted frames into a wireless network.
local
low complexity
apple
7.2
2006-09-19 CVE-2006-4887 Remote Desktop Local Authentication Bypass vulnerability in Apple
Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation.
local
low complexity
apple
7.2
2006-09-19 CVE-2006-4866 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.
local
low complexity
apple
4.6
2006-09-12 CVE-2006-4389 Overflow and Exception vulnerability in Apple QuickTime
Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4388 Overflow and Exception vulnerability in Apple QuickTime
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4386 Overflow and Exception vulnerability in Apple QuickTime
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4385 Overflow and Exception vulnerability in Apple QuickTime
Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image.
network
high complexity
apple
5.1
2006-09-12 CVE-2006-4384 Overflow and Exception vulnerability in Apple QuickTime
Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie.
network
high complexity
apple
5.1