Vulnerabilities > Apple
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-05-12 | CVE-2006-1446 | Multiple vulnerability in Apple Mac OS X Security Update 2006-003 Keychain in Apple Mac OS X 10.3.9 and 10.4.6 might allow an application to bypass a locked Keychain by first obtaining a reference to the Keychain when it is unlocked, then reusing that reference after the Keychain has been locked. | 5.0 |
| 2006-05-12 | CVE-2006-1445 | Multiple vulnerability in Apple Mac OS X Security Update 2006-003 Buffer overflow in the FTP server (FTPServer) in Apple Mac OS X 10.3.9 and 10.4.6 allows remote authenticated users to execute arbitrary code via vectors related to "FTP server path name handling." This vulnerability is addressed in the following product release: Apple, Mac OS X, 10.4.6 (2006-003) | 6.5 |
| 2006-05-12 | CVE-2006-1444 | Multiple vulnerability in Apple mac OS X 10.4.6 CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services. | 2.1 |
| 2006-05-12 | CVE-2006-1443 | Multiple vulnerability in Apple Mac OS X Security Update 2006-003 Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions. | 6.5 |
| 2006-05-12 | CVE-2006-1442 | Multiple vulnerability in Apple Mac OS X Security Update 2006-003 The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle. | 7.5 |
| 2006-05-12 | CVE-2006-1441 | Multiple vulnerability in Apple mac OS X 10.4.6 Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding. | 7.5 |
| 2006-05-12 | CVE-2006-1440 | Multiple vulnerability in Apple Mac OS X Security Update 2006-003 BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links. | 2.1 |
| 2006-05-12 | CVE-2006-1439 | Information Exposure vulnerability in Apple mac OS X 10.4.6 NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events. | 2.1 |
| 2006-05-12 | CVE-2006-1465 | Integer and Buffer Overflow vulnerability in Apple Quicktime 7.0.3/7.0.4 Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file. | 5.1 |
| 2006-05-12 | CVE-2006-1464 | Integer and Buffer Overflow vulnerability in Apple Quicktime 7.0.3/7.0.4 Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 (M4P) video format file. | 5.1 |