Apple Archives - CVE Vulnerability

CVE-2008-7303

Sun, 26 Feb 2023 09:11:57 +0000

The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon’s execution of a script file, a related issue to CVE-2011-1516.

The post CVE-2008-7303 appeared first on CVE Vulnerability.

CVE-2008-3529

Sun, 26 Feb 2023 09:10:03 +0000

Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

The post CVE-2008-3529 appeared first on CVE Vulnerability.

CVE-2008-1012

Sun, 26 Feb 2023 09:08:49 +0000

Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service (file sharing hang) via a crafted AFP request, related to “input validation.”

The post CVE-2008-1012 appeared first on CVE Vulnerability.

CVE-2008-0987

Sun, 26 Feb 2023 09:08:48 +0000

Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image.

The post CVE-2008-0987 appeared first on CVE Vulnerability.

CVE-2007-1338

Sun, 26 Feb 2023 09:05:49 +0000

The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the “Block incoming IPv6 connections” setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.

The post CVE-2007-1338 appeared first on CVE Vulnerability.

CVE-2007-0734

Sun, 26 Feb 2023 09:05:35 +0000

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary directories or execute arbitrary code, resulting from memory corruption.

The post CVE-2007-0734 appeared first on CVE Vulnerability.

CVE-2018-4281

Sun, 26 Feb 2023 06:50:00 +0000

In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.

The post CVE-2018-4281 appeared first on CVE Vulnerability.

CVE-2020-9981

Sun, 26 Feb 2023 06:43:59 +0000

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted file may lead to arbitrary code execution.

The post CVE-2020-9981 appeared first on CVE Vulnerability.

CVE-2020-9915

Sun, 26 Feb 2023 06:43:58 +0000

An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

The post CVE-2020-9915 appeared first on CVE Vulnerability.

CVE-2020-9925

Sun, 26 Feb 2023 06:43:58 +0000

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.

The post CVE-2020-9925 appeared first on CVE Vulnerability.