mac os x vulnerabilities and exploits

(subscribe to this query)

6.4

CVSSv2

In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of...

Openstack Os-vif

6.6

CVSSv2

Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) option to mount_smbfs or (2) an unspecified manipulation of the command line to smbutil....

Apple Mac Os X1 EDB exploit available

7.2

CVSSv2

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors....

Apple Mac Os X2 EDB exploits available1 Metasploit module available8 Github repositories available2 Articles available

7.2

CVSSv2

The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's...

Apple Mac Os X Next Openstep2 EDB exploits available

7.2

CVSSv2

The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry....

Apple Mac Os X Mac Os X Server1 EDB exploit available

4.9

CVSSv2

The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service (filesystem corruption) via a crafted application...

Apple Mac Os X1 EDB exploit available

6.8

CVSSv2

Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x...

K-meleon Project K-meleon Mozilla Firefox Seamonkey Freebsd Netbsd Openbsd11 EDB exploits available2 Github repositories available

5.4

CVSSv2

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service (out-of-bounds memory access) or obtain sensitive memory-content information via a crafted app....

Apple Iphone Os Mac Os X Tvos1 EDB exploit available

10

CVSSv2

A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code...

Sparklabs Viscosity2 EDB exploits available1 Metasploit module available

7.2

CVSSv2

Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges....

Apple Mac Os X Mac Os X Server

1 2 3 4 5 6 NEXT »