Browse CVEs

HIGH 7.1 CVE-2007-2398 Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with … Safari Mitigation only Fix from $1,9502007-06-21 HIGH 7.8 CVE-2007-3284 corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that t… Safari No fix yet Fix from $1,9502007-06-19 HIGH 9.3 CVE-2007-3186 Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, … Safari Mitigation only Fix from $1,9502007-06-12 HIGH 7.8 CVE-2007-3185 Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulations that… Safari Mitigation only Fix from $1,9502007-06-12 HIGH 7.5 CVE-2007-3187 Multiple unspecified vulnerabilities in Apple Safari for Windows allow remote attackers to cause a denial of service or execute arbitrary code, possi… Safari No fix yet Fix from $1,9502007-06-12 HIGH 10.0 CVE-2007-2390EPSS 9% Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service (application termination) and possi… Mac Os X Mitigation only Fix from $1,9502007-05-24 HIGH 9.4 CVE-2007-2386EPSS 50% Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) o… Mac Os X Mitigation only Fix from $1,9502007-05-24 HIGH 9.3 CVE-2007-0750 Integer overflow in CoreGraphics in Apple Mac OS X 10.4 up to 10.4.9 allows remote user-assisted attackers to cause a denial of service (application … Mac Os X Mitigation only Fix from $1,9502007-05-24 HIGH 7.2 CVE-2007-0752 The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, w… Mac Os X Mitigation only Fix from $1,9502007-05-24 HIGH 7.2 CVE-2007-0753 Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i para… Mac Os X Mitigation only Fix from $1,9502007-05-24 MEDIUM 6.8 CVE-2007-0740 Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not display files with the same name in mounted disk images that have the same name, which mig… Mac Os X Mitigation only Fix from $1,6002007-05-24 HIGH 10.0 CVE-2007-2843 Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demon… Safari No fix yet Fix from $1,9502007-05-24 HIGH 7.6 CVE-2007-2175EPSS 84% Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbi… Safari Mitigation only Fix from $1,9502007-04-24 HIGH 7.2 CVE-2007-0725 Buffer overflow in the AirPortDriver module for AirPort in Apple Mac OS X 10.3.9 through 10.4.9, when running on hardware with the original AirPort w… Mac Os X Mitigation only Fix from $1,9502007-04-24 HIGH 7.2 CVE-2007-0732 Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4 through 10.4.9 allows local users to gain privileges via un… Mac Os X Mitigation only Fix from $1,9502007-04-24 MEDIUM 5.0 CVE-2007-2163 Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long str… Safari Mitigation only Fix from $1,6002007-04-22 HIGH 7.5 CVE-2007-1338 The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connect… Airport Extreme No fix yet Fix from $1,9502007-03-08 HIGH 7.8 CVE-2007-1071EPSS 18% Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentatio… Mac Os X No fix yet Fix from $1,9502007-02-22 HIGH 7.1 CVE-2007-0644 Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via format strin… Safari Mitigation only Fix from $1,9502007-02-01 HIGH 7.1 CVE-2007-0646EPSS 10% Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a d… Safari No fix yet Fix from $1,9502007-02-01 HIGH 7.1 CVE-2007-0647 Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifi… Mac Os X No fix yet Fix from $1,9502007-02-01 MEDIUM 6.8 CVE-2007-0645 Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers i… Iphoto Mitigation only Fix from $1,6002007-02-01 HIGH 7.8 CVE-2007-0614EPSS 8% The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a… Ichat No fix yet Fix from $1,9502007-01-31 MEDIUM 5.0 CVE-2007-0613EPSS 7% The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entri… Ichat No fix yet Fix from $1,6002007-01-31 MEDIUM 6.2 CVE-2007-0467 crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges via a symlink attack on applica… Mac Os X No fix yet Fix from $1,6002007-01-31 HIGH 7.6 CVE-2007-0465EPSS 18% Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execute arbitrary code via format st… Installer No fix yet Fix from $1,9502007-01-31 HIGH 7.1 CVE-2007-0588EPSS 6% The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote a… Quicktime Mitigation only Fix from $1,9502007-01-30 MEDIUM 5.0 CVE-2007-0463EPSS 18% Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service (application crash… Software Update No fix yet Fix from $1,6002007-01-29 HIGH 10.0 CVE-2007-0462EPSS 7% The _GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows remote at… Quicktime Mitigation only Fix from $1,9502007-01-26 MEDIUM 6.9 CVE-2007-0023 The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, allows loc… Mac Os X No fix yet Fix from $1,6002007-01-24