Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.3.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-3720
Mobile Accounts in Apple Mac OS X prior to 10.7.5 and 10.8.x prior to 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote malicious users to determine passwords via unspecified access to a mobile account.
Apple Mac Os X 10.6.7Apple Mac Os X 10.6.0Apple Mac Os X 10.5.3Apple Mac Os X 10.6.6Apple Mac Os X 10.4.3Apple Mac Os X 10.0.0Apple Mac Os X 10.4.2Apple Mac Os X 10.6.8Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.7.1Apple Mac Os X 10.2.5Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.6.3Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.5.8Apple Mac Os X 10.8.1Apple Mac Os X 10.6.4
4.6
CVSSv2
CVE-2009-2835
The kernel in Apple Mac OS X prior to 10.6.2 does not properly handle task state segments, which allows local users to gain privileges, cause a denial of service (system crash), or obtain sensitive information via unspecified vectors.
Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.1.3Apple Mac Os X 10.1.5Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.0.1Apple Mac Os X 10.0Apple Mac Os X 10.5.8Apple Mac Os X 10.5.7Apple Mac Os X 10.5.0Apple Mac Os X 10.5Apple Mac Os X 10.6Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.2.2
5.4
CVSSv2
CVE-2009-2808
Help Viewer in Apple Mac OS X prior to 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle malicious users to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.
Apple Mac Os X 10.5.7Apple Mac Os X 10.5.6Apple Mac Os X 10.6Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0Apple Mac Os X 10.2.8Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.5.8Apple Mac Os X 10.5.0Apple Mac Os X 10.5Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.1.0Apple Mac Os X 10.1
4.3
CVSSv2
CVE-2009-2823
The Apache HTTP Server in Apple Mac OS X prior to 10.6.2 enables the HTTP TRACE method, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via unspecified web client software.
Apple Mac Os X 10.5.5Apple Mac Os X 10.5.4Apple Mac Os XApple Mac Os X 10.3.0Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.1.1Apple Mac Os X 10.1.4Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5.0Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0
4.3
CVSSv2
CVE-2009-2825
Certificate Assistant in Apple Mac OS X prior to 10.6.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle malicious users to spoof arbitrary SSL servers vi...
Apple Mac Os X 10.5.7Apple Mac Os X 10.5.6Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.1.2Apple Mac Os X 10.1.1Apple Mac Os X 10.4.10Apple Mac Os X 10.4.11Apple Mac Os X 10.4.8Apple Mac Os X 10.4.9Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.2.0Apple Mac Os X 10.2.8
4.9
CVSSv2
CVE-2009-2834
IOKit in Apple Mac OS X prior to 10.6.2 allows local users to modify the firmware of a (1) USB or (2) Bluetooth keyboard via unspecified vectors.
Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5Apple Mac Os X 10.3.8Apple Mac Os X 10.3.1Apple Mac Os X 10.2.0Apple Mac Os X 10.2.2Apple Mac Os X 10.2Apple Mac Os X 10.1Apple Mac Os X 10.1.5Apple Mac Os X 10.4.0Apple Mac Os X 10.4.5Apple Mac Os X 10.4.7Apple Mac Os X 10.0.2Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.0Apple Mac Os X 10.3.9Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7
4.3
CVSSv2
CVE-2009-2820
The web interface in CUPS prior to 1.4.2, as used on Apple Mac OS X prior to 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote malicious users to conduct cross-site scripting (XSS) attacks and HTTP response splitting...
Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3Apple Mac Os X 10.2.0Apple Mac Os X 10.2.1Apple Mac Os X 10.2.8Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X 10.0.3Apple Mac Os X 10.0.2Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.6Apple Mac Os XApple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5
5
CVSSv2
CVE-2012-3721
Profile Manager in Apple Mac OS X prior to 10.7.5 does not properly perform authentication for the Device Management private interface, which allows malicious users to enumerate managed devices via unspecified vectors.
Apple Mac Os X 10.4.11Apple Mac Os X 10.6.1Apple Mac Os X 10.2.0Apple Mac Os X 10.3.0Apple Mac Os X 10.4.10Apple Mac Os X 10.4.1Apple Mac Os X 10.6.7Apple Mac Os X 10.6.0Apple Mac Os X 10.5.3Apple Mac Os X 10.6.4Apple Mac Os X 10.5.5Apple Mac Os X 10.4.3Apple Mac Os X 10.0.0Apple Mac Os X 10.3.8Apple Mac Os X 10.4.9Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.7.3Apple Mac Os X 10.5.4Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.0.2
6.8
CVSSv2
CVE-2011-0229
Apple Type Services (ATS) in Apple Mac OS X up to and including 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote malicious users to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.
Apple Mac Os X ServerApple Mac Os X Server 10.6.4Apple Mac Os X Server 10.6.3Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.0Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.1.4Apple Mac Os X Server 10.1.3Apple Mac Os X Server 10.0.1Apple Mac Os X Server 10.0.0Apple Mac Os X 10.6.0Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5.0
6.8
CVSSv2
CVE-2011-3217
MediaKit in Apple Mac OS X up to and including 10.6.8 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image.
Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.6.4Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.10Apple Mac Os XApple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.1Apple Mac Os X Server 10.6.0Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.3.8Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.0Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook