Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mac os x vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-4406
Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, when PPPoE is enabled, allows remote malicious users to execute arbitrary code via unspecified vectors.
Apple Mac Os X 10.3.5Apple Mac Os X 10.3.6Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X 10.3Apple Mac Os X 10.3.7Apple Mac Os X 10.3.8Apple Mac Os X 10.4.1Apple Mac Os X 10.4.8Apple Mac Os X 10.3.3Apple Mac Os X 10.3.4Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5
NA
CVE-2014-1370
The byte-swapping implementation in copyfile in Apple OS X prior to 10.9.4 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted AppleDouble file in a ZIP archive.
Apple Mac Os X Server 10.7.3Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.5Apple Mac Os X 10.8.0Apple Mac Os X 10.9Apple Mac Os X 10.9.1Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X 10.8.5Apple Mac Os XApple Mac Os X Server 10.7.5Apple Mac Os X 10.7.0Apple Mac Os X 10.8.1Apple Mac Os X 10.8.2Apple Mac Os X 10.8.3Apple Mac Os X 10.9.2Apple Mac Os X Server 10.7.0Apple Mac Os X 10.7.1Apple Mac Os X 10.7.2Apple Mac Os X 10.8.4
NA
CVE-2003-0171
DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execute arbitrary commands by modifying the PATH to point to a directory containing a malicious touch program.
Apple Mac Os X 10.0.2Apple Mac Os X 10.0.4Apple Mac Os X 10.1.4Apple Mac Os X 10.2Apple Mac Os X 10.2.2Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.2.3Apple Mac Os X 10.1Apple Mac Os X 10.1.1Apple Mac Os X 10.1.2Apple Mac Os X 10.1.3Apple Mac Os X 10.0Apple Mac Os X 10.2.3Apple Mac Os X 10.2.4Apple Mac Os X Server 10.0Apple Mac Os X Server 10.2Apple Mac Os X 10.0.1Apple Mac Os X 10.0.3Apple Mac Os X 10.1.5Apple Mac Os X 10.2.1Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.2.4
NA
CVE-2014-1371
Array index error in Dock in Apple OS X prior to 10.9.4 allows malicious users to execute arbitrary code or cause a denial of service (incorrect function-pointer dereference and application crash) by leveraging access to a sandboxed application for sending a message.
Apple Mac Os X Server 10.7.4Apple Mac Os X 10.7.0Apple Mac Os X 10.7.2Apple Mac Os X 10.8.1Apple Mac Os X 10.8.3Apple Mac Os X 10.9.2Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X Server 10.7.2Apple Mac Os X Server 10.7.3Apple Mac Os X 10.8.5Apple Mac Os XApple Mac Os X 10.9Apple Mac Os X 10.7.3Apple Mac Os X 10.7.4Apple Mac Os X 10.7.5Apple Mac Os X 10.8.0Apple Mac Os X Server 10.7.5Apple Mac Os X 10.7.1Apple Mac Os X 10.8.2Apple Mac Os X 10.8.4Apple Mac Os X 10.9.1
NA
CVE-2011-0185
Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X prior to 10.7.2 allows local users to gain privileges via a crafted name of an executable file.
Apple Mac Os XApple Mac Os X 10.7.0Apple Mac Os X ServerApple Mac Os X Server 10.7.0Apple Mac Os X 10.6.6Apple Mac Os X 10.6.5Apple Mac Os X 10.6.4Apple Mac Os X 10.6.3Apple Mac Os X 10.6.8Apple Mac Os X 10.6.7Apple Mac Os X 10.6.0Apple Mac Os X 10.6.2Apple Mac Os X 10.6.1Apple Mac Os X Server 10.6.8Apple Mac Os X Server 10.6.7Apple Mac Os X Server 10.6.6Apple Mac Os X Server 10.6.5Apple Mac Os X Server 10.6.4Apple Mac Os X Server 10.6.1Apple Mac Os X Server 10.6.0Apple Mac Os X Server 10.6.3Apple Mac Os X Server 10.6.2
NA
CVE-2009-1236
Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and previous versions on Apple Mac OS X 10.5.6 and previous versions allows remote malicious users to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites ...
Apple Mac Os X 10.0Apple Mac Os X 10.1.0Apple Mac Os X 10.1.1Apple Mac Os X 10.1.2Apple Mac Os X 10.2.2Apple Mac Os X 10.2.3Apple Mac Os X 10.3.0Apple Mac Os X 10.3.1Apple Mac Os X 10.3.8Apple Mac Os X 10.3.9Apple Mac Os X 10.4Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X 10.4.9Apple Mac Os X 10.5Apple Mac Os XApple Mac Os X Server 10.0Apple Mac Os X Server 10.1.0Apple Mac Os X Server 10.1.1Apple Mac Os X Server 10.2.1Apple Mac Os X Server 10.2.2Apple Mac Os X Server 10.3.0
NA
CVE-2009-1238
Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and previous versions on Apple Mac OS X 10.5.6 and previous versions allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in...
Apple Mac Os X 10.0.0Apple Mac Os X 10.0.1Apple Mac Os X 10.1.2Apple Mac Os X 10.1.3Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.4Apple Mac Os X 10.4.0Apple Mac Os X 10.4.1Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X 10.5.0Apple Mac Os X 10.5.1Apple Mac Os X Server 10.0.0Apple Mac Os X Server 10.0.1Apple Mac Os X Server 10.1.2Apple Mac Os X Server 10.1.3Apple Mac Os X Server 10.2.3Apple Mac Os X Server 10.2.4Apple Mac Os X Server 10.3.2
NA
CVE-2009-1235
XNU 1228.9.59 and previous versions on Apple Mac OS X 10.5.6 and previous versions does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and perf...
Apple Mac Os X 10.0.2Apple Mac Os X 10.0.3Apple Mac Os X 10.1.4Apple Mac Os X 10.1.5Apple Mac Os X 10.2.6Apple Mac Os X 10.2.7Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.4.1Apple Mac Os X 10.4.10Apple Mac Os X 10.4.11Apple Mac Os X 10.4.8Apple Mac Os X 10.0Apple Mac Os X 10.1.0Apple Mac Os X 10.1.1Apple Mac Os X 10.2.2Apple Mac Os X 10.2.3Apple Mac Os X 10.3.0Apple Mac Os X 10.3.1Apple Mac Os X 10.0.4Apple Mac Os X 10.1Apple Mac Os X 10.2
NA
CVE-2009-1237
Multiple memory leaks in XNU 1228.3.13 and previous versions on Apple Mac OS X 10.5.6 and previous versions allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call.
Apple Mac Os X 10.0.0Apple Mac Os X 10.0.1Apple Mac Os X 10.1.3Apple Mac Os X 10.1.4Apple Mac Os X 10.2.4Apple Mac Os X 10.2.5Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.4.0Apple Mac Os X 10.4.1Apple Mac Os X 10.4.6Apple Mac Os X 10.4.7Apple Mac Os X 10.5.0Apple Mac Os X 10.5.1Apple Mac Os X 10.0.4Apple Mac Os X 10.1Apple Mac Os X 10.1.0Apple Mac Os X 10.2.0Apple Mac Os X 10.2.1Apple Mac Os X 10.2.8Apple Mac Os X 10.3Apple Mac Os X 10.3.6
NA
CVE-2006-0383
IPSec when used with VPN networks in Mac OS X 10.4 up to and including 10.4.5 allows remote malicious users to cause a denial of service (application crash) via unspecified vectors involving the "incorrect handling of error conditions".
Apple Mac Os X 10.3.4Apple Mac Os X 10.3.5Apple Mac Os X 10.4.2Apple Mac Os X 10.4.3Apple Mac Os X Server 10.3.4Apple Mac Os X Server 10.3.5Apple Mac Os X Server 10.4.3Apple Mac Os X Server 10.4.4Apple Mac Os X 10.3.1Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.4Apple Mac Os X 10.4.1Apple Mac Os X Server 10.3.2Apple Mac Os X Server 10.3.3Apple Mac Os X Server 10.4.1Apple Mac Os X Server 10.4.2Apple Mac Os X 10.3.6Apple Mac Os X 10.3.7Apple Mac Os X 10.4.4Apple Mac Os X 10.4.5Apple Mac Os X Server 10.3.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook