CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Apple : Security Vulnerabilities Published In 2006 (Overflow)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2006-6652 Exec Code Overflow 2006-12-19 2017-07-28
9.0
 Admin Remote Low Single system Complete Complete Complete
Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long pathname that results from path expansion.
2 CVE-2006-6173 Exec Code Overflow 2006-11-30 2017-07-28
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X 10.4.6 and earlier allows local users to execute arbitrary code via (1) a small range count, which causes insufficient memory allocation, or (2) a large number of ranges in the shared_region_make_private_np_args parameter.
3 CVE-2006-6129 DoS Exec Code Overflow Mem. Corr. 2006-11-26 2017-07-28
4.6
 User Local Low Not required Partial Partial Partial
Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly execute arbitrary code via a crafted Mach-O Universal program that triggers memory corruption.
4 CVE-2006-6015 DoS Overflow 2006-11-21 2008-09-05
5.0
 None Remote Low Not required None None Partial
Buffer overflow in the JavaScript implementation in Safari on Apple Mac OS X 10.4 allows remote attackers to cause a denial of service (application crash) via a long argument to the exec method of a regular expression.
5 CVE-2006-5710 119 Exec Code Overflow 2006-11-03 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow.
6 CVE-2006-4866 Exec Code Overflow 2006-09-19 2008-09-05
4.6
 User Local Low Not required Partial Partial Partial
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.
7 CVE-2006-4406 Exec Code Overflow 2006-11-30 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, when PPPoE is enabled, allows remote attackers to execute arbitrary code via unspecified vectors.
8 CVE-2006-4402 Exec Code Overflow 2006-11-30 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user-assisted remote attackers to execute arbitrary code by browsing directories containing crafted .DS_Store files.
9 CVE-2006-4400 Exec Code Overflow 2006-11-30 2008-09-05
5.1
 User Remote High Not required Partial Partial Partial
Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and earlier allow user-assisted attackers to execute arbitrary code via crafted font files.
10 CVE-2006-4398 Exec Code Overflow 2006-11-30 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 through 10.4.8 allow local users to execute arbitrary code via crafted service requests.
11 CVE-2006-4391 Exec Code Overflow 2006-10-03 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image.
12 CVE-2006-4388 Exec Code Overflow 2006-09-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file.
13 CVE-2006-4386 Exec Code Overflow 2006-09-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381.
14 CVE-2006-4385 Exec Code Overflow 2006-09-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image.
15 CVE-2006-4384 Exec Code Overflow 2006-09-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie.
16 CVE-2006-4382 Exec Code Overflow 2006-09-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted QuickTime movie.
17 CVE-2006-4381 Exec Code Overflow 2006-09-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie.
18 CVE-2006-3946 119 DoS Exec Code Overflow 2006-07-31 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag.
19 CVE-2006-3509 DoS Exec Code Overflow 2006-09-21 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service (crash) or execute arbitrary code in third-party wireless software that uses the API via crafted frames.
20 CVE-2006-3508 DoS Exec Code Overflow +Priv 2006-09-21 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service (crash), gain privileges, and execute arbitrary code via a crafted frame that is not properly handled during scan cache updates.
21 CVE-2006-3507 Exec Code Overflow 2006-09-21 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by injecting crafted frames into a wireless network.
22 CVE-2006-3506 Exec Code Overflow 2006-08-21 2008-09-05
4.6
 User Local Low Not required Partial Partial Partial
Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified vectors related to "processing a path name."
23 CVE-2006-3503 DoS Exec Code Overflow 2006-08-02 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed GIF image.
24 CVE-2006-3501 DoS Exec Code Overflow 2006-08-02 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Radiance image.
25 CVE-2006-3498 Exec Code Overflow 2006-08-02 2017-07-19
10.0
 Admin Remote Low Not required Complete Complete Complete
Stack-based buffer overflow in bootpd in the DHCP component for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to execute arbitrary code via a crafted BOOTP request.
26 CVE-2006-2238 119 Exec Code Overflow 2006-05-12 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function. NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier because it is a distinct issue.
27 CVE-2006-1985 119 Exec Code Overflow 2006-04-21 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.
28 CVE-2006-1983 119 DoS Exec Code Overflow 2006-04-21 2017-07-19
6.4
 None Remote Low Not required None Partial Partial
Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit. NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family.
29 CVE-2006-1982 Exec Code Overflow 2006-04-21 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images.
30 CVE-2006-1552 189 DoS Overflow 2006-03-31 2017-07-19
5.0
 None Remote Low Not required None None Partial
Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".
31 CVE-2006-1473 DoS Exec Code Overflow 2006-08-02 2017-07-19
5.0
 None Remote Low Not required None None Partial
Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors.
32 CVE-2006-1469 119 DoS Exec Code Overflow 2006-06-27 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image.
33 CVE-2006-1467 189 Exec Code Overflow 2006-06-29 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC (M4P, M4A, or M4B) file with a sample table size (STSZ) atom with a "malformed" sample_size_table value.
34 CVE-2006-1465 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file.
35 CVE-2006-1464 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 (M4P) video format file.
36 CVE-2006-1463 119 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a H.264 (M4V) video format file with a certain modified size value.
37 CVE-2006-1462 189 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime H.264 (M4V) video format file.
38 CVE-2006-1461 119 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash (SWF) file.
39 CVE-2006-1460 119 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime movie (.MOV), as demonstrated via a large size for a udta Atom.
40 CVE-2006-1459 189 DoS Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted QuickTime movie (.MOV).
41 CVE-2006-1458 189 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute arbitrary code via a crafted JPEG image.
42 CVE-2006-1456 Exec Code Overflow 2006-05-12 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted RTSP request, which is not properly handled during message logging.
43 CVE-2006-1454 119 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file with malformed image data.
44 CVE-2006-1453 119 Exec Code Overflow 2006-05-12 2017-07-19
5.1
 User Remote High Not required Partial Partial Partial
Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed font information.
45 CVE-2006-1452 Exec Code Overflow 2006-05-12 2017-07-19
4.6
 User Local Low Not required Partial Partial Partial
Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy.
46 CVE-2006-1449 Exec Code Overflow 2006-05-12 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
Integer overflow in Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted MacMIME encapsulated attachment.
47 CVE-2006-1445 Exec Code Overflow 2006-05-12 2017-07-19
6.5
 User Remote Low Single system Partial Partial Partial
Buffer overflow in the FTP server (FTPServer) in Apple Mac OS X 10.3.9 and 10.4.6 allows remote authenticated users to execute arbitrary code via vectors related to "FTP server path name handling."
48 CVE-2006-1441 Exec Code Overflow 2006-05-12 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.
49 CVE-2006-1249 189 Exec Code Overflow 2006-03-18 2017-07-19
6.8
 User Remote Medium Not required Partial Partial Partial
Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks.
50 CVE-2006-1220 Exec Code Overflow 2006-03-13 2013-09-06
4.6
 User Local Low Not required Partial Partial Partial
Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown attack vectors related to a large message header size, which leads to a heap-based buffer overflow.
Total number of vulnerabilities : 53   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.