18 March 2008

39 results · Feed

• Unscored —
  CVE-2008-0052

  CoreServices in Apple Mac OS X 10.4.11 treats .ief as a safe file type, which allows remote attackers to force Safari u…

  Mar 18, 2008
• Unscored —
  CVE-2008-0996

  The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an…

  Mar 18, 2008
• Unscored —
  CVE-2008-0998

  Unspecified vulnerability in NetCfgTool in the System Configuration component in Apple Mac OS X 10.4.11 and 10.5.2 allo…

  Mar 18, 2008
• Unscored —
  CVE-2008-0999

  Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc …

  Mar 18, 2008
• Unscored —
  CVE-2008-0058

  Race condition in the NSURLConnection cache management functionality in Foundation for Apple Mac OS X 10.4.11 allows re…

  Mar 18, 2008
• Unscored —
  CVE-2008-0055

  Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively an…

  Mar 18, 2008
• Unscored —
  CVE-2008-0988

  Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to c…

  Mar 18, 2008
• Unscored —
  CVE-2008-0993

  Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line argument…

  Mar 18, 2008
• Unscored —
  CVE-2008-0047

  Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bun…

  cups Debian
  Mar 18, 2008
• Unscored —
  CVE-2008-0992

  Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an a…

  Mar 18, 2008
• Unscored —
  CVE-2008-0994

  Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for atta…

  Mar 18, 2008
• Unscored —
  CVE-2008-0990

  notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel, w…

  Mar 18, 2008
• Unscored —
  CVE-2008-0054

  Foundation in Apple Mac OS X 10.4.11 might allow context-dependent attackers to execute arbitrary code via a malformed …

  Mar 18, 2008
• Unscored —
  CVE-2008-0059

  Race condition in NSXML in Foundation for Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrar…

  Mar 18, 2008
• Unscored —
  CVE-2008-0989

  Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary cod…

  Mar 18, 2008
• Unscored —
  CVE-2008-0987

  Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2…

  Mar 18, 2008
• Unscored —
  CVE-2008-0053

  Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to exec…

  cups Debian
  Mar 18, 2008
• Unscored —
  CVE-2008-0056

  Stack-based buffer overflow in Foundation in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbit…

  Mar 18, 2008
• Unscored —
  CVE-2008-0995

  The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it …

  Mar 18, 2008
• Unscored —
  CVE-2008-0060

  Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remote attackers to execute arbitrary Applescript via a help:to…

  Mar 18, 2008
• Unscored —
  CVE-2008-1000 Public exploit

  Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows …

  Mar 18, 2008
• Unscored —
  CVE-2008-0051

  Integer overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute arbitrary code via craf…

  Mar 18, 2008
• Unscored —
  CVE-2008-0997

  Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial…

  Mar 18, 2008
• Unscored —
  CVE-2008-0048

  Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary…

  Mar 18, 2008
• Unscored —
  CVE-2008-0046

  The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific …

  Mar 18, 2008
• Unscored —
  CVE-2008-0044

  Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial o…

  Mar 18, 2008
• Unscored —
  CVE-2008-0045

  Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authent…

  Mar 18, 2008
• Unscored —
  CVE-2008-0049

  AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communicati…

  Mar 18, 2008
• Unscored —
  CVE-2008-0050

  CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Ga…

  Mar 18, 2008
• Unscored —
  CVE-2008-0057

  Multiple integer overflows in a "legacy serialization format" parser in AppKit in Apple Mac OS X 10.4.11 allows remote …

  Mar 18, 2008
• Unscored —
  CVE-2008-1383

  The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux, stores the SSL key in …

  Mar 18, 2008
• Unscored —
  CVE-2008-1372

  bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted …

  bzip2 Debian
  Mar 18, 2008
• Unscored —
  CVE-2008-1369

  A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ss…

  Mar 18, 2008
• Unscored —
  CVE-2008-1370 Public exploit

  PHP remote file inclusion vulnerability in index.php in wildmary Yap Blog 1.1 allows remote attackers to execute arbitr…

  Mar 18, 2008
• Unscored —
  CVE-2008-1330

  Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows…

  Mar 18, 2008
• Unscored —
  CVE-2008-1371 Public exploit

  Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and …

  Mar 18, 2008
• Unscored —
  CVE-2008-0727

  Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attacker…

  Mar 18, 2008
• Unscored —
  CVE-2008-0949

  Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 7.x through 11.x allows remote attackers to gain privile…

  Mar 18, 2008
• Unscored —
  CVE-2008-1368 EPSS 11%

  CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP co…

  Mar 18, 2008