MO
Product
Mac OS X Server
655
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 18Medium 8Low 0
Watch
Add Mac OS X Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1728 | – | Aug 6 | Stack-based buffer overflow in Image RAW in Apple Mac OS X 10.5 before 10.5.8, and 10.4 before Digital Camera RAW Compatibility Update 2.6, allows remote attackers to execute… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +16 more |
| CVE-2009-1727 | – | Aug 6 | Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
| CVE-2009-1726 | – | Aug 6 | Heap-based buffer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 10.4.11; 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; +4 more |
| CVE-2009-1723 | – | Aug 6 | CFNetwork in Apple Mac OS X 10.5 before 10.5.8 places an incorrect URL in a certificate warning in certain 302 redirection scenarios, which makes it easier for remote attackers to… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
| CVE-2009-0151 | – | Aug 6 | The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +3 more |
| CVE-2009-1717 | – | Jun 5 | Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0944 | – | May 13 | The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0943 | – | May 13 | Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0942 | – | May 13 | Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0161 | – | May 13 | The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +1 more |
| CVE-2009-0160 | – | May 13 | QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0158 | – | May 13 | Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0157 | – | May 13 | Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash)… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2009-0156 | – | May 13 | Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder crash) via a crafted Mach-O executable… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0155 | – | May 13 | Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2009-0154 | – | May 13 | Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0153 | – | May 13 | International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2009-0150 | – | May 13 | Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a… Affected: 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.5; +1 more |
| CVE-2009-0149 | – | May 13 | Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0145 | – | May 13 | CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute… Affected: 10.4.11; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +1 more |
| CVE-2009-0144 | – | May 13 | CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing… Affected: 10.5.1; 10.5.2; 10.5.3; 10.5.4; 10.5.6 |
| CVE-2008-1517 | – | May 13 | Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (system shutdown) via… Affected: 10.5; 10.5.0; 10.5.1; 10.5.2; 10.5.3; 10.5.4; +2 more |
| CVE-2009-0946 | – | Apr 17 | Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1)… Affected: 10.6.0 through 10.6.4; 10.4.11; 10.5.8 |
| CVE-2009-1238 | – | Apr 2 | Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory… Affected: through 10.5.6; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-1237 | – | Apr 2 | Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted… Affected: through 10.5.6; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-1236 | – | Apr 2 | Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service… Affected: through 10.5.6; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-1235 | – | Apr 2 | XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to… Affected: through 10.5.6; 10.0; 10.0.0; 10.0.1; 10.0.2; 10.0.3; +34 more |
| CVE-2009-0140 | – | Feb 13 | Unspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote SMB servers to cause a denial of service (memory exhaustion and system shutdown)… Affected: 10.4.11; 10.5.6 |
| CVE-2009-0139 | – | Feb 13 | Integer overflow in the SMB component in Apple Mac OS X 10.5.6 allows remote SMB servers to cause a denial of service (system shutdown) or execute arbitrary code via a crafted SMB… Affected: 10.5.6 |
| CVE-2009-0138 | – | Feb 13 | servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration Affected: 10.5.6 |
| CVE-2009-0020 | – | Feb 13 | Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary… Affected: 10.4.11; 10.5.6 |
| CVE-2009-0019 | – | Feb 13 | Remote Apple Events in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) or obtain sensitive information via… Affected: 10.4.11; 10.5.6 |
| CVE-2009-0018 | – | Feb 13 | The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory Affected: 10.4.11; 10.5.6 |
| CVE-2009-0017 | – | Feb 13 | csregprinter in the Printing component in Apple Mac OS X 10.4.11 and 10.5.6 does not properly handle error conditions, which allows local users to execute arbitrary code via… Affected: 10.4.11; 10.5.6 |
| CVE-2009-0015 | – | Feb 13 | Unspecified vulnerability in fseventsd in the FSEvents framework in Apple Mac OS X 10.5.6 allows local users to obtain sensitive information (filesystem activities and directory… Affected: 10.5.6 |
| CVE-2009-0014 | – | Feb 13 | Folder Manager in Apple Mac OS X 10.5.6 uses insecure default permissions when recreating a Downloads folder after it has been deleted, which allows local users to bypass intended… Affected: 10.5.6 |
| CVE-2009-0013 | – | Feb 13 | dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing… Affected: 10.4.11; 10.5.6 |
| CVE-2009-0012 | – | Feb 13 | Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string Affected: 10.5.6 |
| CVE-2009-0011 | – | Feb 13 | Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file Affected: 10.5.6 |
| CVE-2009-0009 | – | Feb 13 | Unspecified vulnerability in the Pixlet codec in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and possibly… Affected: 10.4.11; 10.5.6 |
| CVE-2009-0142 | – | Feb 12 | Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vectors related to "file enumeration logic." Affected: 10.5.6 |
| CVE-2008-4237 | – | Dec 17 | Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have… Affected: through 10.5.5; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-4236 | – | Dec 17 | Apple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted embedded font in a PDF file Affected: through 10.5.5; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-4234 | – | Dec 17 | Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via… Affected: through 10.5.5; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-4224 | – | Dec 17 | UDF in Apple Mac OS X before 10.5.6 allows user-assisted attackers to cause a denial of service (system crash) via a malformed UDF volume in a crafted ISO file Affected: through 10.5.5; 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; +1 more |
| CVE-2008-4223 | – | Dec 17 | Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors Affected: through 10.5.5; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
| CVE-2008-4222 | – | Dec 17 | natd in network_cmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of service (infinite loop) via a crafted TCP… Affected: through 10.5.5; 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; +1 more |
| CVE-2008-4221 | – | Dec 17 | The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute… Affected: through 10.5.5; 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; +1 more |
| CVE-2008-4220 | – | Dec 17 | Integer overflow in the inet_net_pton API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to execute arbitrary code or cause a denial of service… Affected: through 10.5.5; 10.4.11; 10.5; 10.5.1; 10.5.2; 10.5.3; +1 more |
| CVE-2008-4219 | – | Dec 17 | The kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service (infinite loop and system halt) by running an application that is dynamically linked to… Affected: through 10.5.5; 10.5; 10.5.1; 10.5.2; 10.5.3; 10.5.4 |
The 500 most important CVEs for this product (exploited first, then by severity)