Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2005-08-19 CVE-2005-2507 Unspecified vulnerability in Apple mac OS X Server 10.3.9/10.4.2
Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.
network
low complexity
apple
7.5
2005-08-19 CVE-2005-2506 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service (CPU consumption) via crafted Gregorian dates.
network
low complexity
apple
5.0
2005-08-19 CVE-2005-2505 Unspecified vulnerability in Apple mac OS X 10.3.9
Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation.
network
low complexity
apple
7.5
2005-08-19 CVE-2005-2504 Unspecified vulnerability in Apple mac OS X and mac OS X Server
The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with "Requires Authentication: No" even when the user has selected the "Require pairing for security" option, which could confuse users about which setting is valid.
local
low complexity
apple
7.2
2005-08-19 CVE-2005-2503 Unspecified vulnerability in Apple mac OS X and mac OS X Server
AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window.
local
low complexity
apple
4.6
2005-08-19 CVE-2005-2502 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file.
network
high complexity
apple
5.1
2005-08-19 CVE-2005-2501 Unspecified vulnerability in Apple mac OS X and mac OS X Server
Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file.
network
high complexity
apple
7.6
2005-08-17 CVE-2005-2594 Denial Of Service vulnerability in Apple Safari 1.3
Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javascript, possibly involving a function that defines a handler for itself within the function body.
network
low complexity
apple
5.0
2005-07-19 CVE-2005-2196 Unspecified vulnerability in Apple Airport Card
The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network.
local
low complexity
apple
2.1
2005-07-18 CVE-2005-2195 Denial-Of-Service vulnerability in Darwin Streaming Server
Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) via a URL with a filename containing a .cgi extension and an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1, a different vulnerability than CVE-2003-0421 and CVE-2003-0502.
network
low complexity
apple
5.0