Browse CVEs

HIGH 7.5 CVE-2011-3446 Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execu… Mac Os X after 10.7.2 Fix from $1,9502012-02-02 HIGH 7.5 CVE-2011-3453 Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap me… Mac Os X after 10.7.2 Fix from $1,9502012-02-02 HIGH 7.5 CVE-2011-3457 The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remo… Mac Os X after 10.7.2 Fix from $1,9502012-02-02 HIGH 7.5 CVE-2011-3460 Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (applicat… Mac Os X after 10.7.2 Fix from $1,9502012-02-02 HIGH 7.2 CVE-2011-3463 WebDAV Sharing in Apple Mac OS X 10.7.x before 10.7.3 does not properly perform authentication, which allows local users to gain privileges by levera… Mac Os X Mitigation only Fix from $1,9502012-02-02 MEDIUM 6.8 CVE-2011-3448 Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of servic… Mac Os X after 10.7.2 Fix from $1,6002012-02-02 MEDIUM 6.8 CVE-2011-3449 Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of servi… Mac Os X after 10.7.2 Fix from $1,6002012-02-02 MEDIUM 6.8 CVE-2011-3450 CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arb… Mac Os X Mitigation only Fix from $1,6002012-02-02 MEDIUM 6.8 CVE-2011-3458 QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitra… Mac Os X after 10.7.2 Fix from $1,6002012-02-02 MEDIUM 6.8 CVE-2011-3459 Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (applica… Mac Os X after 10.7.2 Fix from $1,6002012-02-02 MEDIUM 5.0 CVE-2011-3462 Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote atta… Mac Os X after 10.7.2 Fix from $1,6002012-02-02 MEDIUM 5.0 CVE-2011-4692 WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for imag… Safari after 15 Fix from $1,6002011-12-07 MEDIUM 5.0 CVE-2010-5070 The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle… Safari No fix yet Fix from $1,6002011-12-07 HIGH 7.6 CVE-2008-7303 The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attack… Mac Os X No fix yet Fix from $1,9502011-11-15 HIGH 7.6 CVE-2011-1516 The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all crea… Mac Os X No fix yet Fix from $1,9502011-11-15 HIGH 9.3 CVE-2011-3439EPSS 5% FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)… Iphone Os 5.0.1+ Fix from $1,9502011-11-11 HIGH 7.2 CVE-2011-3442 The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute a… Iphone Os Mitigation only Fix from $1,9502011-11-11 MEDIUM 6.8 CVE-2011-3437 Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a cr… Mac Os X Mitigation only Fix from $1,6002011-10-14 MEDIUM 6.5 CVE-2011-3436 Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allo… Mac Os X Mitigation only Fix from $1,6002011-10-14 HIGH 9.3 CVE-2011-3430 The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement local… Iphone Os No fix yet Fix from $1,9502011-10-14 MEDIUM 6.8 CVE-2011-3260 Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application cra… Iphone Os Mitigation only Fix from $1,6002011-10-14 MEDIUM 6.8 CVE-2011-3261 Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (appli… Iphone Os Mitigation only Fix from $1,6002011-10-14 MEDIUM 5.0 CVE-2011-3259 The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remo… Apple Tv Mitigation only Fix from $1,6002011-10-14 MEDIUM 5.0 CVE-2011-3432 The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers… Iphone Os Mitigation only Fix from $1,6002011-10-14 MEDIUM 6.8 CVE-2011-3223 Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (applicat… Mac Os X after 10.7.1 Fix from $1,6002011-10-14 MEDIUM 6.8 CVE-2011-3226 Open Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307 or custom mappings, allows remote attackers to bypas… Mac Os X Mitigation only Fix from $1,6002011-10-14 MEDIUM 6.8 CVE-2011-3227 libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extension in a Certificate Revocation … Mac Os X after 10.7.1 Fix from $1,6002011-10-14 MEDIUM 6.8 CVE-2011-3228 QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and appli… Mac Os X after 10.7.1 Fix from $1,6002011-10-14 MEDIUM 6.8 CVE-2011-3229 Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions c… Safari after 5.1 Fix from $1,6002011-10-14 MEDIUM 6.8 CVE-2011-3230EPSS 50% Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via… Safari after 5.1 Fix from $1,6002011-10-14