Vulnerabilities > Apple

DATE CVE VULNERABILITY TITLE RISK
2002-07-11 CVE-2002-0676 Unspecified vulnerability in Apple mac OS X
SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates.
network
low complexity
apple
7.5
2002-05-29 CVE-2002-0252 Remote Buffer Overflow vulnerability in Apple QuickTime Content-Type
Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header.
network
low complexity
apple
7.5
2001-12-31 CVE-2001-1575 Authentication DoS vulnerability in Apple Personal web Sharing 1.1/1.5/1.5.5
Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow.
network
low complexity
apple
5.0
2001-12-31 CVE-2001-1565 Authentication Credentials Disclosure vulnerability in Apple Mac OS X PPP
Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command.
local
low complexity
apple
2.1
2001-12-31 CVE-2001-1531 Buffer Overflow vulnerability in Apple Claris Emailer 2.0V2
Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename.
network
low complexity
apple
7.5
2001-12-31 CVE-2001-1480 Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
network
low complexity
apple sun
7.5
2001-12-06 CVE-2001-0806 Unspecified vulnerability in Apple mac OS X
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages.
local
low complexity
apple
3.6
2001-12-06 CVE-2001-0720 Unspecified vulnerability in Apple mac OS X 10.4.9
Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled.
network
low complexity
apple
7.5
2001-10-17 CVE-2001-1447 Privilege Escalation vulnerability in MacOS X NetInfo Manager
NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus, which causes the applications to run with root privileges.
local
low complexity
apple
7.2
2001-09-20 CVE-2001-0649 Denial-Of-Service vulnerability in Apple Personal web Sharing 1.5.5
Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.
network
low complexity
apple
5.0