Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x server 10.7.4 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2013-1024
CoreMedia Playback in Apple Mac OS X prior to 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
Apple Mac Os X 10.7.1Apple Mac Os X 10.7.0Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X Server 10.7.4Apple Mac Os XApple Mac Os X 10.7.2Apple Mac Os X Server 10.7.2Apple Mac Os X 10.8.2Apple Mac Os X 10.8.1Apple Mac Os X 10.7.5Apple Mac Os X Server 10.7.5Apple Mac Os X Server 10.7.3Apple Mac Os X 10.8.0
6.8
CVSSv2
CVE-2013-0975
Buffer overflow in QuickDraw Manager in Apple Mac OS X prior to 10.8.4 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
Apple Mac Os X 10.7.4Apple Mac Os X 10.7.5Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.1Apple Mac Os X 10.7.3Apple Mac Os X Server 10.7.2Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.0Apple Mac Os X 10.7.2Apple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.5Apple Mac Os X 10.8.0Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2Apple Mac Os X
1.7
CVSSv2
CVE-2013-0982
The Private Browsing feature in CFNetwork in Apple Mac OS X prior to 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate malicious users to bypass cookie-based authentication by leveraging an unattended workstation.
Apple Mac Os X 10.7.5Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.1Apple Mac Os X 10.7.3Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.0Apple Mac Os X 10.7.2Apple Mac Os X 10.7.4Apple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.5Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2Apple Mac Os XApple Mac Os X 10.8.0
4.9
CVSSv2
CVE-2013-0990
SMB in Apple Mac OS X prior to 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors.
Apple Mac Os X 10.7.0Apple Mac Os X 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X 10.7.4Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.5Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.3Apple Mac Os X 10.7.5Apple Mac Os X 10.8.2Apple Mac Os XApple Mac Os X 10.8.0Apple Mac Os X 10.8.1
6.4
CVSSv2
CVE-2013-0966
The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X prior to 10.8.3 does not properly handle ignorable Unicode characters, which allows remote malicious users to bypass intended directory authentication requirements via a crafted pathname in a URI.
Apple Mac Os X 10.6.8Apple Mac Os X Server 10.6.8Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.5Apple Mac Os X 10.7.4Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.1Apple Mac Os X 10.7.0Apple Mac Os X Server 10.7.0Apple Mac Os X 10.7.3Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.5Apple Mac Os X Server 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.8.0Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2
6.8
CVSSv2
CVE-2013-0971
Use-after-free vulnerability in PDFKit in Apple Mac OS X prior to 10.8.3 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via crafted ink annotations in a PDF document.
Apple Mac Os X 10.6.8Apple Mac Os X Server 10.6.8Apple Mac Os X Server 10.7.5Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X Server 10.7.3Apple Mac Os X 10.7.1Apple Mac Os X 10.7.0Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.5Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X Server 10.7.4Apple Mac Os X 10.8.0Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2
6.8
CVSSv2
CVE-2013-0973
Software Update in Apple Mac OS X up to and including 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle malicious users to execute plugin code by modifying the client-server data stream.
Apple Mac Os X 10.6.8Apple Mac Os X Server 10.6.8Apple Mac Os X 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X Server 10.7.4Apple Mac Os X Server 10.7.5Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X 10.7.5Apple Mac Os X Server 10.7.0Apple Mac Os X 10.7.0Apple Mac Os X 10.7.2Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.3
4.3
CVSSv2
CVE-2013-0967
CoreTypes in Apple Mac OS X prior to 10.8.3 includes JNLP files in the list of safe file types, which allows remote malicious users to bypass a Java plug-in disabled setting, and trigger the launch of Java Web Start applications, via a crafted web site.
Apple Mac Os X Server 10.7.3Apple Mac Os X 10.7.0Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.5Apple Mac Os X 10.7.3Apple Mac Os X Server 10.7.1Apple Mac Os X 10.7.4Apple Mac Os X 10.7.2Apple Mac Os X 10.7.1Apple Mac Os X Server 10.7.0Apple Mac Os X 10.8.0Apple Mac Os X 10.8.2Apple Mac Os X 10.8.1
7.5
CVSSv2
CVE-2012-3716
CoreText in Apple Mac OS X 10.7.x prior to 10.7.5 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds write or read) via a crafted text glyph.
Apple Mac Os X 10.7.4Apple Mac Os X 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.7.1Apple Mac Os X 10.7.0Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.4Apple Mac Os X Server 10.7.2Apple Mac Os X Server 10.7.3
6.8
CVSSv2
CVE-2012-0660
Buffer underflow in QuickTime in Apple Mac OS X prior to 10.7.4 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG file.
Apple Mac Os X 10.6.0Apple Mac Os X 10.6.6Apple Mac Os X 10.5.3Apple Mac Os X 10.5.0Apple Mac Os X 10.4.4Apple Mac Os X 10.4.3Apple Mac Os X 10.4.2Apple Mac Os X 10.4.0Apple Mac Os X 10.4.9Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.1.0Apple Mac Os X 10.1Apple Mac Os X 10.0.1Apple Mac Os X 10.0Apple Mac Os X 10.7.2Apple Mac Os X 10.6.8Apple Mac Os X 10.6.5Apple Mac Os X 10.6.1Apple Mac Os X 10.5.8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook