Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple mac os x 10.4.4 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2006-4409
The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X 10.4 up to and including 10.4.8 retrieve certificate revocation lists (CRL) when an HTTP proxy is in use, which could cause the system to accept certificates that have been revoked.
Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.4Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8
9.4
CVSSv2
CVE-2007-2386
Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote malicious users to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.
Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X 10.4Apple Mac Os X 10.4.8Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5
7.2
CVSSv2
CVE-2006-4392
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 up to and including 10.4.7 and (2) OpenStep prior to 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the ch...
Apple Mac Os X 10.4Apple Mac Os X 10.4.7Next Openstep 4.1Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6
6.9
CVSSv2
CVE-2007-0724
The IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 up to and including 10.4.8 does not sufficiently limit access to certain controls, which allows local users to gain privileges by using HID device events to read keystrokes from the console.
Apple Mac Os X 10.3.9Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.7Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.8Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.8Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.2
4.6
CVSSv2
CVE-2007-0738
The Login Window in Apple Mac OS X 10.4 up to and including 10.4.9 does not display the screen saver authentication dialog in certain circumstances when waking from sleep, even though the "require a password to wake the computer from sleep" option is enabled, which allo...
Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X 10.4.9Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X 10.4Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8
4.6
CVSSv2
CVE-2007-0739
The Login Window in Apple Mac OS X 10.4 up to and including 10.4.9 displays the software update window beneath the loginwindow authentication dialog in certain circumstances related to running scheduled tasks, which allows local users to bypass authentication controls.
Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.9Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6
7.1
CVSSv2
CVE-2007-4678
AppleRAID in Apple Mac OS X 10.3.9 and 10.4 up to and including 10.4.10 allows malicious users to cause a denial of service (crash) via a crafted striped disk image, which triggers a NULL pointer dereference when it is mounted.
Apple Mac Os X 10.4.10Apple Mac Os X 10.4.2Apple Mac Os X 10.4.9Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.6Apple Mac Os X Server 10.4.8Apple Mac Os X 10.3.9Apple Mac Os X Server 10.4.9Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X Server 10.4.2Apple Mac Os X Server 10.4.3Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8Apple Mac Os X Server 10.4.4Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.4.7Apple Mac Os X 10.4.3Apple Mac Os X 10.4.4Apple Mac Os X Server 10.4.1
7.2
CVSSv2
CVE-2007-4269
Integer overflow in the Networking component in Apple Mac OS X 10.4 up to and including 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk Session Protocol (ASP) message on an AppleTalk socket, which triggers a heap-based buffer overflow.
Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X Server 10.4.9Apple Mac Os X Server 10.4Apple Mac Os X Server 10.4.2Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X Server 10.4.0Apple Mac Os X Server 10.4.8Apple Mac Os X Server 10.4.10Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.3Apple Mac Os X 10.4Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X Server 10.4.5Apple Mac Os X Server 10.4.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.10Apple Mac Os X 10.4.8Apple Mac Os X 10.4.9Apple Mac Os X Server 10.4.7
7.5
CVSSv2
CVE-2006-3946
WebCore in Apple Mac OS X 10.3.9 and 10.4 up to and including 10.4.7 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer ove...
Apple Safari 2.0.4Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X 10.3.9Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7
10
CVSSv2
CVE-2007-3828
Unspecified vulnerability in mDNSResponder in Apple Mac OS X allows remote malicious users to execute arbitrary code via unspecified vectors, a related issue to CVE-2007-2386.
Apple Mac Os X 10.4.1Apple Mac Os X 10.4.2Apple Mac Os X 10.4.4Apple Mac Os X 10.4.9Apple Mac Os X 10.4.5Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X 10.4.8Apple Mac Os X 10.4Apple Mac Os X 10.4.10Apple Mac Os X 10.4.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook