Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x server 10.2.1 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2011-0229
Apple Type Services (ATS) in Apple Mac OS X up to and including 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote malicious users to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.
Apple Mac Os X ServerApple Mac Os X Server 10.6.4Apple Mac Os X Server 10.6.3Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.0Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.1.4Apple Mac Os X Server 10.1.3Apple Mac Os X Server 10.0.1Apple Mac Os X Server 10.0.0Apple Mac Os X 10.6.0Apple Mac Os X 10.5.8Apple Mac Os X 10.5.1Apple Mac Os X 10.5.0
6.8
CVSSv2
CVE-2011-3217
MediaKit in Apple Mac OS X up to and including 10.6.8 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image.
Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.6.4Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.10Apple Mac Os XApple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.1Apple Mac Os X Server 10.6.0Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.3.8Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.0Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.1
2.6
CVSSv2
CVE-2011-3218
The "Save for Web" selection in QuickTime Player in Apple Mac OS X up to and including 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle malicious users to conduct cross-site scripting (XSS) attacks by spoofing the ...
Apple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.6.4Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.5.4Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.7Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.2.6Apple Mac Os X Server 10.2.5Apple Mac Os X Server 10.1.5Apple Mac Os X Server 10.1.4Apple Mac Os X Server 10.1.3Apple Mac Os X Server 10.0.2Apple Mac Os X Server 10.0.1Apple Mac Os X 10.6.1Apple Mac Os X 10.6.0Apple Mac Os X 10.5.1
2.6
CVSSv2
CVE-2011-3224
The User Documentation component in Apple Mac OS X up to and including 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle malicious users to execute arbitrary code by spoofing the http server.
Apple Mac Os X 10.6.7Apple Mac Os X 10.6.6Apple Mac Os X Server 10.5.7Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.3.6Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.2.8Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.0Apple Mac Os X Server 10.2Apple Mac Os X Server 10.0.4Apple Mac Os X Server 10.0.3Apple Mac Os X 10.6.3Apple Mac Os X 10.6.2Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.4.6
4.6
CVSSv2
CVE-2011-3214
IOGraphics in Apple Mac OS X up to and including 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate malicious users to bypass the password requirement via unspecified vectors.
Apple Mac Os X 10.6.6Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.5.6Apple Mac Os X Server 10.5.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.2.7Apple Mac Os X Server 10.2.6Apple Mac Os X Server 10.2Apple Mac Os X Server 10.1.5Apple Mac Os X Server 10.0.3Apple Mac Os X Server 10.0.2Apple Mac Os X Server 10.6.6Apple Mac Os X 10.6.7Apple Mac Os X Server 10.5.8Apple Mac Os X Server 10.5.7Apple Mac Os X Server 10.5.0Apple Mac Os X Server 10.5
6.8
CVSSv2
CVE-2011-0224
CoreMedia in Apple Mac OS X up to and including 10.6.8 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file.
Apple Mac Os XApple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.1Apple Mac Os X Server 10.6.0Apple Mac Os X Server 10.5.2Apple Mac Os X Server 10.5.1Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.3.9Apple Mac Os X Server 10.3.8Apple Mac Os X Server 10.3.1Apple Mac Os X Server 10.3.0Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.1.1Apple Mac Os X Server 10.1.0Apple Mac Os X Server 10.0Apple Mac Os X 10.6.5Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.4.9
5
CVSSv2
CVE-2003-0804
The arplookup function in FreeBSD 5.1 and previous versions, Mac OS X prior to 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests.
Apple Mac Os X 10.2Apple Mac Os X 10.2.1Apple Mac Os X Server 10.2.7Freebsd Freebsd 4.0Freebsd Freebsd 4.1Freebsd Freebsd 4.1.1Openbsd Openbsd 3.3Openbsd Openbsd 3.4Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X Server 10.2Apple Mac Os X Server 10.2.1Freebsd Freebsd 4.6Freebsd Freebsd 4.6.2Freebsd Freebsd 4.7Freebsd Freebsd 4.8Apple Mac Os X 10.2.2Apple Mac Os X 10.2.4Apple Mac Os X Server 10.2.3Apple Mac Os X Server 10.2.5Freebsd Freebsd 4.3Freebsd Freebsd 4.5
2.1
CVSSv2
CVE-2012-3718
Apple Mac OS X prior to 10.7.5 and 10.8.x prior to 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.
Apple Mac Os X 10.5.6Apple Mac Os X 10.6.4Apple Mac Os X 10.5.5Apple Mac Os X 10.7.2Apple Mac Os X 10.3.9Apple Mac Os X 10.3.8Apple Mac Os X 10.4.9Apple Mac Os X 10.4.8Apple Mac Os X 10.7.3Apple Mac Os X 10.5.4Apple Mac Os X 10.2.8Apple Mac Os X 10.3Apple Mac Os X 10.0.3Apple Mac Os X 10.0.2Apple Mac Os X 10.1Apple Mac Os X 10.5.2Apple Mac Os X 10.4.11Apple Mac Os X 10.5.1Apple Mac Os X 10.1.0Apple Mac Os X 10.3.0Apple Mac Os X 10.4.10Apple Mac Os X 10.7.0
9.3
CVSSv2
CVE-2013-0984
Directory Service in Apple Mac OS X up to and including 10.6.8 allows remote malicious users to execute arbitrary code or cause a denial of service (daemon crash) via a crafted message.
Apple Mac Os X 10.5.7Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.4.10Apple Mac Os X 10.4.1Apple Mac Os X 10.4.0Apple Mac Os X 10.3.9Apple Mac Os X 10.2.4Apple Mac Os X 10.2.3Apple Mac Os X 10.2.2Apple Mac Os X 10.2.1Apple Mac Os X 10.6.7Apple Mac Os X 10.6.2Apple Mac Os X 10.6.0Apple Mac Os X 10.5.2Apple Mac Os X 10.5.0Apple Mac Os X 10.4.3Apple Mac Os X 10.4.11Apple Mac Os X 10.3.8Apple Mac Os X 10.3.6
7.5
CVSSv2
CVE-2012-0650
Buffer overflow in the DirectoryService Proxy in DirectoryService in Apple Mac OS X up to and including 10.6.8 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Apple Mac Os X 10.6.3Apple Mac Os X 10.6.2Apple Mac Os X 10.6.1Apple Mac Os X 10.6.0Apple Mac Os X 10.4.5Apple Mac Os X 10.4.4Apple Mac Os X 10.4.3Apple Mac Os X 10.4.2Apple Mac Os X 10.3.1Apple Mac Os X 10.3.0Apple Mac Os X 10.2.8Apple Mac Os X 10.2.7Apple Mac Os X 10.2.6Apple Mac Os X 10.0.4Apple Mac Os X 10.0.3Apple Mac Os X 10.0.2Apple Mac Os X 10.0.1Apple Mac Os X 10.5.4Apple Mac Os X 10.5.3Apple Mac Os X 10.5.2Apple Mac Os X 10.5.1Apple Mac Os X 10.3.9
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook