Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.7.3 vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2013-0966
The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X prior to 10.8.3 does not properly handle ignorable Unicode characters, which allows remote malicious users to bypass intended directory authentication requirements via a crafted pathname in a URI.
Apple Mac Os X 10.6.8Apple Mac Os X Server 10.6.8Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.5Apple Mac Os X 10.7.4Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.1Apple Mac Os X 10.7.0Apple Mac Os X Server 10.7.0Apple Mac Os X 10.7.3Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.5Apple Mac Os X Server 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.8.0Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2
6.8
CVSSv2
CVE-2014-1259
Buffer overflow in File Bookmark in Apple OS X prior to 10.9.2 allows malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted filename.
Apple Mac Os X 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X 10.8.2Apple Mac Os X 10.8.1Apple Mac Os X 10.8.0Apple Mac Os XApple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.5Apple Mac Os X 10.8.5Apple Mac Os X 10.8.4Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.0Apple Mac Os X 10.7.5Apple Mac Os X 10.8.3Apple Mac Os X 10.9
7.5
CVSSv2
CVE-2014-1256
Buffer overflow in Apple Type Services (ATS) in Apple OS X prior to 10.9.2 allows malicious users to bypass the App Sandbox protection mechanism via crafted Mach messages.
Apple Mac Os X 10.8.5Apple Mac Os X 10.8.4Apple Mac Os X 10.8.3Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X 10.7.4Apple Mac Os X 10.8.1Apple Mac Os XApple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.4Apple Mac Os X Server 10.7.5Apple Mac Os X 10.7.0Apple Mac Os X 10.7.1Apple Mac Os X 10.9Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.3Apple Mac Os X 10.7.5Apple Mac Os X 10.8.2Apple Mac Os X 10.8.0
4.6
CVSSv2
CVE-2014-1265
The systemsetup program in the Date and Time subsystem in Apple OS X prior to 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the system clock.
Apple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.4Apple Mac Os X Server 10.7.5Apple Mac Os X 10.7.0Apple Mac Os X 10.7.1Apple Mac Os X 10.9Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.3Apple Mac Os X 10.7.5Apple Mac Os X 10.8.2Apple Mac Os X 10.8.0Apple Mac Os X 10.8.5Apple Mac Os X 10.8.4Apple Mac Os X 10.8.3Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X 10.7.4Apple Mac Os X 10.8.1Apple Mac Os X
7.5
CVSSv2
CVE-2014-1371
Array index error in Dock in Apple OS X prior to 10.9.4 allows malicious users to execute arbitrary code or cause a denial of service (incorrect function-pointer dereference and application crash) by leveraging access to a sandboxed application for sending a message.
Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.0Apple Mac Os X 10.7.2Apple Mac Os X 10.8.1Apple Mac Os X 10.8.3Apple Mac Os X 10.9.2Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X Server 10.7.3Apple Mac Os X 10.8.5Apple Mac Os XApple Mac Os X 10.9Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X 10.7.5Apple Mac Os X 10.8.0Apple Mac Os X Server 10.7.5Apple Mac Os X 10.7.1Apple Mac Os X 10.8.2Apple Mac Os X 10.8.4Apple Mac Os X 10.9.1
6.8
CVSSv2
CVE-2014-1370
The byte-swapping implementation in copyfile in Apple OS X prior to 10.9.4 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted AppleDouble file in a ZIP archive.
Apple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.5Apple Mac Os X 10.8.0Apple Mac Os X 10.9Apple Mac Os X 10.9.1Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X 10.8.5Apple Mac Os XApple Mac Os X Server 10.7.5Apple Mac Os X 10.7.0Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2Apple Mac Os X 10.8.3Apple Mac Os X 10.9.2Apple Mac Os X Server 10.7.0Apple Mac Os X 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X 10.8.4
6.8
CVSSv2
CVE-2014-1268
WebKit, as used in Apple Safari prior to 6.1.2 and 7.x prior to 7.0.2, allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1269 and CVE-2014-...
Apple Mac Os X 10.8.2Apple Mac Os X 10.8.3Apple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.5Apple Safari 6.0Apple Safari 6.0.1Apple Safari 6.1Apple SafariApple Mac Os X 10.8.0Apple Mac Os X 10.8.1Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Safari 7.0Apple Safari 7.0.1Apple Mac Os X 10.9Apple Mac Os X 10.9.1Apple Mac Os X 10.8.5Apple Mac Os X Server 10.7.0Apple Mac Os X 10.7.1
6.8
CVSSv2
CVE-2014-1269
WebKit, as used in Apple Safari prior to 6.1.2 and 7.x prior to 7.0.2, allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1268 and CVE-2014-...
Apple Mac Os X 10.8.2Apple Mac Os X 10.8.3Apple Mac Os X 10.8.4Apple Mac Os X Server 10.7.4Apple Mac Os X Server 10.7.5Apple Safari 6.0Apple Safari 6.0.1Apple SafariApple WebkitApple Mac Os X 10.8.5Apple Mac Os X 10.7.0Apple Mac Os X 10.7.1Apple Safari 6.0.2Apple Safari 6.0.3Apple Mac Os X 10.9Apple Mac Os X 10.9.1Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X 10.7.3Apple Safari 6.0.4Apple Safari 6.0.5
6.8
CVSSv2
CVE-2014-1270
WebKit, as used in Apple Safari prior to 6.1.2 and 7.x prior to 7.0.2, allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1268 and CVE-2014-...
Apple Mac Os X 10.8.0Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2Apple Mac Os X Server 10.7.2Apple Mac Os X Server 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X 10.7.5Apple Safari 7.0.1Apple Safari 6.1Apple Mac Os X 10.9Apple Mac Os X 10.9.1Apple Mac Os X 10.8.5Apple Mac Os X 10.7.0Apple Mac Os X 10.7.1Apple Safari 6.0.2Apple Safari 6.0.3Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X 10.7.3Apple Safari 6.0.4Apple Safari 6.0.5
4.3
CVSSv2
CVE-2014-1296
CFNetwork in Apple iOS prior to 7.1.1, Apple OS X up to and including 10.9.2, and Apple TV prior to 6.1.1 does not ensure that a Set-Cookie HTTP header is complete before interpreting the header's value, which allows remote malicious users to bypass intended access restricti...
Apple Iphone Os 7.0.2Apple Iphone Os 7.0.3Apple Iphone Os 7.0.4Apple Iphone Os 7.0.5Apple Iphone Os 7.0.1Apple Iphone Os 7.0.6Apple Iphone Os 7.0Apple Iphone OsApple Mac Os X 10.8.2Apple Mac Os X 10.8.3Apple Mac Os X 10.8.4Apple Mac Os X 10.8.5Apple Mac Os X 10.8.1Apple Mac Os X 10.8.0Apple Mac Os XApple Mac Os X 10.9Apple Mac Os X 10.9.1Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.0Apple Mac Os X 10.7.1Apple Mac Os X 10.7.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook