apple mac os x 10.8.1 vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

IOAcceleratorFamily in Apple Mac OS X prior to 10.8.3 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted graphics image.

Apple Mac Os X Apple Mac Os X 10.8.1 Apple Mac Os X 10.8.0

6.8

CVSSv2

Stack consumption vulnerability in CoreAnimation in Apple Mac OS X prior to 10.8.4 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted text glyph in a URL encountered by Safari.

Apple Mac Os X Apple Mac Os X 10.8.1 Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.2

2.1

CVSSv2

Disk Management in Apple Mac OS X prior to 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to cause a denial of service (loss of encryption functionality) via an unspecified command line.

Apple Mac Os X Apple Mac Os X 10.8.2 Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.1

4.3

CVSSv2

Messages in Apple Mac OS X prior to 10.8.3 allows remote malicious users to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL.

Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.1 Apple Mac Os X 10.8.2

4.9

CVSSv2

Login Window in Apple Mac OS X prior to 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate malicious users to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard.

Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.2 Apple Mac Os X 10.8.1

6.8

CVSSv2

Installer in Apple Mac OS X prior to 10.8.5 provides an option to continue a package's installation after encountering a revoked certificate, which might allow user-assisted remote malicious users to execute arbitrary code via a crafted package.

Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.2 Apple Mac Os X 10.8.3 Apple Mac Os X Apple Mac Os X 10.8.1

4.9

CVSSv2

The kernel in Apple Mac OS X prior to 10.8.5 allows remote malicious users to cause a denial of service (panic) via crafted IGMP packets that leverage incorrect, extraneous code in the IGMP parser.

Apple Mac Os X 10.8.3 Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.1 Apple Mac Os X 10.8.2 Apple Mac Os X

2.1

CVSSv2

mdmclient in Mobile Device Management in Apple Mac OS X prior to 10.8.5 places a password on the command line, which allows local users to obtain sensitive information by listing the process.

Apple Mac Os X 10.8.2 Apple Mac Os X Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.1 Apple Mac Os X 10.8.3

3.3

CVSSv2

Power Management in Apple Mac OS X prior to 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate malicious users to bypass intended access restrictions by visiting an unattended workstation on which a locking failure ha...

Apple Mac Os X 10.8.3 Apple Mac Os X Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.2 Apple Mac Os X 10.8.1

5.5

CVSSv2

Screen Lock in Apple Mac OS X prior to 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access.

Apple Mac Os X 10.8.1 Apple Mac Os X 10.8.3 Apple Mac Os X Apple Mac Os X 10.8.0 Apple Mac Os X 10.8.2

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook