Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.5.4 vulnerabilities and exploits

(subscribe to this query)

9.3
CVSSv2
CVE-2008-3638
Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbitrary programs....
Apple Mac Os X 10.5.4Apple Mac Os X 10.5.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.5
9.3
CVSSv2
CVE-2008-3637
The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to execute arbitrary code via a crafted applet, related to an "error checking issue."...
Apple Mac Os X 10.4.11Apple Mac Os X 10.5.4Apple Mac Os X 10.5.5Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.5
5
CVSSv2
CVE-2008-3617
Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed...
Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4
7.2
CVSSv2
CVE-2008-3609
The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file....
Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4
7.6
CVSSv2
CVE-2008-3610
Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by selection of an...
Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4
10
CVSSv2
CVE-2008-3616
Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via vectors associated with "passing untrusted input" to...
Apple Mac Os X 10.4.11Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4
4.3
CVSSv2
CVE-2009-0144
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections....
Apple Mac Os X 10.5.6Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X 10.5.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.5.6
9.3
CVSSv2
CVE-2008-3621
VideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving H.264 encoded media....
Apple Mac Os X 10.4.11Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4
9.3
CVSSv2
CVE-2008-3608
ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted JPEG image with an embedded ICC profile....
Apple Mac Os X 10.4.11Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.4Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4
10
CVSSv2
CVE-2008-4220
Integer overflow in the inet_net_pton API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. NOTE: this may be related to the WLB-2008080064 advisory...
Apple Mac Os X 10.4.11Apple Mac Os X 10.5Apple Mac Os X 10.5.1Apple Mac Os X 10.5.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.4Apple Mac Os XApple Mac Os X Server 10.4.11Apple Mac Os X Server 10.5Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.3Apple Mac Os X Server 10.5.4Apple Mac Os X Server
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
remote attackersCVE-2021-31258lightcmsman-in-the-middleCVE-2021-20989CVE-2021-28310CVE-2020-4006CVE-2021-28548spoofCVE-2021-27112lightcms project
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook