MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-0178 | – | Mar 23 | The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2011-0177 | – | Mar 23 | Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2011-0176 | – | Mar 23 | Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2011-0174 | – | Mar 23 | Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2011-0173 | – | Mar 23 | Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2011-0172 | – | Mar 23 | AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-Fi frames on the local wireless network,… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +1 more |
| CVE-2011-1417 | – | Mar 11 | Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute… Affected: through 10.6.6; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; +1 more |
| CVE-2010-4013 | – | Jan 10 | Format string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5 |
| CVE-2010-4011 | – | Nov 16 | Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in… Affected: 10.6.5 |
| CVE-2010-4010 | – | Nov 16 | Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format (CFF)… Affected: 10.5.8 |
| CVE-2010-1847 | – | Nov 16 | The kernel in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform memory management associated with terminal devices, which allows local users to cause a denial of… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3783 | – | Nov 16 | Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3784 | – | Nov 16 | The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle XML data, which allows attackers to cause a… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3785 | – | Nov 16 | Buffer overflow in QuickLook in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3786 | – | Nov 16 | QuickLook in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3787 | – | Nov 16 | Heap-based buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3788 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows remote attackers to execute arbitrary… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3789 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1846 | – | Nov 16 | Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3791 | – | Nov 16 | Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3792 | – | Nov 16 | Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3793 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3794 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3795 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows remote attackers to execute arbitrary… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3796 | – | Nov 16 | Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed:… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3797 | – | Nov 16 | Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to inject arbitrary web script or HTML… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3798 | – | Nov 16 | Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-3790 | – | Nov 16 | QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1845 | – | Nov 16 | ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1844 | – | Nov 16 | Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (memory consumption and system crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1843 | – | Nov 16 | Networking in Apple Mac OS X 10.6.2 through 10.6.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted PIM packet Affected: 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1830 | – | Nov 15 | AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1842 | – | Nov 15 | Buffer overflow in AppKit in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1841 | – | Nov 15 | Disk Images in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1840 | – | Nov 15 | Stack-based buffer overflow in the password-validation functionality in Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1838 | – | Nov 15 | Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1837 | – | Nov 15 | CoreText in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1836 | – | Nov 15 | Stack-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1834 | – | Nov 15 | CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to track users by setting a cookie… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1833 | – | Nov 15 | Apple Type Services (ATS) in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1832 | – | Nov 15 | Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a crafted embedded… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1831 | – | Nov 15 | Buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a long name of an embedded… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1829 | – | Nov 15 | Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitrary code by creating files… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1828 | – | Nov 15 | AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon restart) via crafted… Affected: 10.5.8; 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1803 | – | Nov 15 | Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify the unique identifier of its remote AFP volume, which allows remote attackers to obtain sensitive information… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1820 | – | Sep 21 | Apple Filing Protocol (AFP) Server in Apple Mac OS X 10.6.x through 10.6.4 does not properly handle errors, which allows remote attackers to bypass the password requirement for… Affected: 10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4 |
| CVE-2010-1808 | – | Aug 25 | Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.5.8; 10.6.4 |
| CVE-2010-1802 | – | Aug 25 | libsecurity in Apple Mac OS X 10.5.8 and 10.6.4 does not properly perform comparisons to domain-name strings in X.509 certificates, which allows man-in-the-middle attackers to… Affected: 10.5.8; 10.6.4 |
| CVE-2010-1801 | – | Aug 25 | Heap-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)… Affected: 10.5.8; 10.6.4 |
| CVE-2010-1800 | – | Aug 25 | CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive… Affected: 10.6.3; 10.6.4 |
The 500 most important CVEs for this product (exploited first, then by severity)