Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2005-10-26 CVE-2005-2524 Unspecified vulnerability in Apple mac OS X, mac OS X Server and Safari
Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site.
network
low complexity
apple
5.0
2005-10-25 CVE-2005-2748 Unspecified vulnerability in Apple mac OS X and mac OS X Server
The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application.
local
low complexity
apple
2.1
2005-10-25 CVE-2005-2747 Multiple vulnerability in Apple Mac OS X Security Update 2005-008
Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file.
network
low complexity
apple
7.5
2005-10-25 CVE-2005-2744 Multiple vulnerability in Apple Mac OS X Security Update 2005-008
Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, and Finder, allows remote attackers to execute arbitrary code via a crafted PICT file.
network
high complexity
apple
5.1
2005-09-21 CVE-2005-3018 Unspecified vulnerability in Apple Safari
Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.
network
low complexity
apple
5.0
2005-08-19 CVE-2005-2526 CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection.
network
low complexity
easy-software-products apple
5.0
2005-08-19 CVE-2005-2525 CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt).
network
low complexity
easy-software-products apple
5.0
2005-08-19 CVE-2005-2523 Unspecified vulnerability in Apple mac OS X and Weblog Server
Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
network
apple
4.3
2005-08-19 CVE-2005-2522 Unspecified vulnerability in Apple mac OS X and Safari
Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.
network
high complexity
apple
5.1
2005-08-19 CVE-2005-2521 Unspecified vulnerability in Apple mac OS X 10.3.9
Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors.
local
low complexity
apple
4.6