Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple iOS and macOSRace Condition

Risk 59
Severity
6.9
Race Condition
AV:L/AC:M/Au:N/C:C/I:C/A:C

Race condition in the initialization routine in blued in Bluetooth in Apple Mac OS X before 10.7.4 allows local users to gain privileges via vectors involving a temporary file.

First published (updated )
CVE-2012-0649

Apple Mac OS X ServerDesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticate…

Risk 59
Severity
6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C

DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local users to bypass intended disk-quota restrictions and have unspecified other impact by copying files owned by other users.

First published (updated )
CVE-2010-0064

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted audio sample tables in a movie file that is progressively downloaded.

First published (updated )
CVE-2012-0658

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Buffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.

First published (updated )
CVE-2012-0660

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

libsecurity in Apple Mac OS X before 10.7.4 accesses uninitialized memory locations during the processing of X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted certificate.

First published (updated )
CVE-2012-0654

Apple iOS and macOSInteger Overflow

Risk 47
Severity
6.8
Integer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.

First published (updated )
CVE-2012-0659

CVE-2011-0173Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-…

Risk 47
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in a dialog in an AppleScript Studio application.

First published (updated )
CVE-2011-0173

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document that contains a crafted embedded font.

First published (updated )
CVE-2011-0179

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font.

First published (updated )
CVE-2011-0175

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font.

First published (updated )
CVE-2011-0174

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font.

First published (updated )
CVE-2011-0176

Apple iOS and macOSInteger Overflow

Risk 47
Severity
6.8
Integer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image.

First published (updated )
CVE-2011-0181

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.

First published (updated )
CVE-2011-0177

Apple QuickTimeInteger Overflow

Risk 47
Severity
6.8
Integer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RIFF WAV file.

First published (updated )
CVE-2011-0209

Apple QuickTimeInteger Overflow

Risk 47
Severity
6.8
Integer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

First published (updated )
CVE-2011-0211

Apple QuickTimeBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted sample tables in a movie file.

First published (updated )
CVE-2011-0210

Apple iOS and macOSBuffer Overflow, Integer Overflow

Risk 47
Severity
6.8
Buffer Overflow, Integer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in ColorSync in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image containing a crafted embedded ColorSync profile that triggers a heap-based buffer overflow.

First published (updated )
CVE-2011-0200

Apple QuickTimeBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Buffer overflow in QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG file.

First published (updated )
CVE-2011-0213

Apple iOS and macOSCode Injection

Risk 47
Severity
6.8
Code Injection
AV:N/AC:M/Au:N/C:P/I:P/A:P

CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file.

First published (updated )
CVE-2011-0224

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

QuickLook in Apple Mac OS X 10.6 before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office document.

First published (updated )
CVE-2011-0208

Apple iOS and macOSInteger Overflow

Risk 47
Severity
6.8
Integer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in CoreGraphics in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded Type 1 font in a PDF document.

First published (updated )
CVE-2011-0202

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image.

First published (updated )
CVE-2011-0204

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.

First published (updated )
CVE-2011-0229

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image.

First published (updated )
CVE-2011-0205

Apple iOS and macOSInteger Overflow

Risk 47
Severity
6.8
Integer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.

First published (updated )
CVE-2011-0194

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image.

First published (updated )
CVE-2011-0193

ruby-lang rubyThe VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as u…

Risk 48
Severity
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

Drew Yao of Apple Product Security reported a flaw in how Ruby's BigDecimal implementation. In a 64-bit program, if the amount of memory to allocate is greater than 2^32, the allocated amount will be truncated to a 32-bit unsigned integer, however the amount to memset will use the full 64-bit number, leading to a crash or memory corruption. After the memset, the unexpectedly small buffer could be used in other ways that lead to memory corruption or, possibly, code execution.

This flaw only affects 64-bit processes.

To test whether or not ruby is vulnerable, the following can be used (on a vulnerable ruby it will cause a segfault):

$ ruby -e 'require "bigdecimal"; BigDecimal.new("8").(0x20000000)'

Upstream committed the following to fix the flaw:

http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/ext/bigdecimal/bigdecimal.c?r1=29364&r2=30993

1 / 2
Source: Red Hat
First published (updated )
CVE-2011-0188

Apple QuickTimeBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.

First published (updated )
CVE-2011-0186

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code via a crafted embedded TrueType font.

First published (updated )
CVE-2011-0198

Apple iOS and macOSBuffer Overflow

Risk 47
Severity
6.8
Buffer Overflow
AV:N/AC:M/Au:N/C:P/I:P/A:P

QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel spreadsheet with a crafted formula that uses unspecified opcodes.

First published (updated )
CVE-2011-0184

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203