Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.7.5 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-3720
Mobile Accounts in Apple Mac OS X prior to 10.7.5 and 10.8.x prior to 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote malicious users to determine passwords via unspecified access to a mobile account.
Apple Mac Os X 10.6.7Apple Mac Os X 10.6.0Apple Mac Os X 10.5.3Apple Mac Os X 10.6.6Apple Mac Os X 10.4.3Apple Mac Os X 10.0.0Apple Mac Os X 10.4.2Apple Mac Os X 10.6.8Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X 10.7.1Apple Mac Os X 10.2.5Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.6.3Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.5.8Apple Mac Os X 10.8.1Apple Mac Os X 10.6.4
2.1
CVSSv2
CVE-2012-3718
Apple Mac OS X prior to 10.7.5 and 10.8.x prior to 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.
Apple Mac Os X 10.5.6Apple Mac Os X 10.6.4Apple Mac Os X 10.5.5Apple Mac Os X 10.7.2Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.4.9Apple Mac Os X 10.4.8Apple Mac Os X 10.7.3Apple Mac Os X 10.5.4Apple Mac Os X 10.2.8Apple Mac Os X 10.3Apple Mac Os X 10.0.3Apple Mac Os X 10.0.2Apple Mac Os X 10.1Apple Mac Os X 10.5.2Apple Mac Os X 10.4.11Apple Mac Os X 10.5.1Apple Mac Os X 10.1.0Apple Mac Os X 10.3.0Apple Mac Os X 10.4.10Apple Mac Os X 10.7.0
6.8
CVSSv2
CVE-2012-3719
Mail in Apple Mac OS X prior to 10.7.5 does not properly handle embedded web plugins, which allows remote malicious users to execute arbitrary plugin code via an e-mail message that triggers the loading of a third-party plugin.
Apple Mac Os X 10.4.11Apple Mac Os X 10.6.1Apple Mac Os X 10.2.0Apple Mac Os X 10.3.0Apple Mac Os X 10.4.10Apple Mac Os X 10.4.1Apple Mac Os X 10.4.6Apple Mac Os X 10.4.5Apple Mac Os X 10.2.6Apple Mac Os X 10.5.0Apple Mac Os X 10.6.5Apple Mac Os X 10.3.1Apple Mac Os X 10.0.1Apple Mac Os X 10.0Apple Mac Os X 10.5.1Apple Mac Os X 10.5.6Apple Mac Os X 10.4.0Apple Mac Os X 10.4.4Apple Mac Os X 10.7.0Apple Mac Os X 10.4Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2
4.6
CVSSv2
CVE-2012-3723
Apple Mac OS X prior to 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physically proximate malicious users to execute arbitrary code or cause a denial of service (memory corruption and system crash) by attaching a USB device.
Apple Mac Os X 10.6.6Apple Mac Os X 10.6.2Apple Mac Os X 10.1.0Apple Mac Os X 10.2.0Apple Mac Os X 10.6.8Apple Mac Os X 10.4.10Apple Mac Os X 10.4.8Apple Mac Os X 10.4.7Apple Mac Os X 10.2.5Apple Mac Os X 10.2.6Apple Mac Os X 10.3Apple Mac Os X 10.6.5Apple Mac Os X 10.3.7Apple Mac Os X 10.6.3Apple Mac Os X 10.0.4Apple Mac Os X 10.1.2Apple Mac Os XApple Mac Os X 10.6.7Apple Mac Os X 10.5.1Apple Mac Os X 10.5.6Apple Mac Os X 10.4.4Apple Mac Os X 10.4.3
6.8
CVSSv2
CVE-2012-3722
The Sorenson codec in QuickTime in Apple Mac OS X prior to 10.7.5, and in CoreMedia in iOS prior to 6, accesses uninitialized memory locations, which allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file ...
Apple Mac Os X 10.6.7Apple Mac Os X 10.5.1Apple Mac Os X 10.5.6Apple Mac Os X 10.4.4Apple Mac Os X 10.4.3Apple Mac Os X 10.4Apple Mac Os X 10.3.9Apple Mac Os X 10.2.1Apple Mac Os X 10.2.2Apple Mac Os X 10.5Apple Mac Os X 10.7.3Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.5.7Apple Mac Os X 10.0.3Apple Mac Os X 10.0.2Apple Mac Os X 10.1.3Apple Mac Os X 10.2Apple Mac Os X 10.6.0Apple Mac Os X 10.5.3Apple Mac Os X 10.6.4Apple Mac Os X 10.5.5
7.5
CVSSv2
CVE-2012-3716
CoreText in Apple Mac OS X 10.7.x prior to 10.7.5 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds write or read) via a crafted text glyph.
Apple Mac Os X 10.7.4Apple Mac Os X 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.7.1Apple Mac Os X 10.7.0Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.4Apple Mac Os X Server 10.7.2Apple Mac Os X Server 10.7.3
5
CVSSv2
CVE-2014-4453
Apple iOS prior to 8.1.1 and OS X prior to 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote malicious users to obtain sensitive information via unspecified vectors.
Apple Iphone OsApple Iphone Os 8.0.2Apple Iphone Os 8.0.1Apple Iphone Os 8.0Apple Mac Os XApple Mac Os X 10.8.5Apple Mac Os X 10.8.4Apple Mac Os X 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.6.4Apple Mac Os X 10.6.3Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.4.7Apple Mac Os X 10.4.6Apple Mac Os X 10.4.1Apple Mac Os X 10.4.0Apple Mac Os X 10.3.3Apple Mac Os X 10.3.2Apple Mac Os X 10.2.5Apple Mac Os X 10.2.4Apple Mac Os X 10.1.4
5
CVSSv2
CVE-2014-4458
The "System Profiler About This Mac" component in Apple OS X prior to 10.10.1 includes extraneous cookie data in system-model requests, which might allow remote malicious users to obtain sensitive information via unspecified vectors.
Apple Mac Os XApple Mac Os X 10.8.5Apple Mac Os X 10.8.4Apple Mac Os X 10.7.3Apple Mac Os X 10.7.2Apple Mac Os X 10.6.4Apple Mac Os X 10.6.3Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.4.7Apple Mac Os X 10.4.6Apple Mac Os X 10.4.1Apple Mac Os X 10.4.0Apple Mac Os X 10.3.3Apple Mac Os X 10.3.2Apple Mac Os X 10.2.5Apple Mac Os X 10.2.4Apple Mac Os X 10.1.4Apple Mac Os X 10.1.3Apple Mac Os X 10.9.3Apple Mac Os X 10.9.2Apple Mac Os X 10.8.1
2.1
CVSSv2
CVE-2014-4460
CFNetwork in Apple iOS prior to 8.1.1 and OS X prior to 10.10.1 does not properly clear the browsing cache upon a transition out of private-browsing mode, which makes it easier for physically proximate malicious users to obtain sensitive information by reading cache files.
Apple Iphone Os 8.0Apple Iphone OsApple Iphone Os 8.0.2Apple Iphone Os 8.0.1Apple Mac Os X 10.9Apple Mac Os X 10.8.5Apple Mac Os X 10.7.5Apple Mac Os X 10.7.4Apple Mac Os X 10.6.6Apple Mac Os X 10.6.5Apple Mac Os X 10.6.4Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.4.9Apple Mac Os X 10.4.8Apple Mac Os X 10.4.11Apple Mac Os X 10.4.10Apple Mac Os X 10.4.1Apple Mac Os X 10.3.5Apple Mac Os X 10.3.4Apple Mac Os X 10.2.7Apple Mac Os X 10.2.6
7.2
CVSSv2
CVE-2015-1130
The XPC implementation in Admin Framework in Apple OS X prior to 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.
Apple Mac Os X
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook