| Max CVSS | 10.0 | Min CVSS | 4.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4234 | 9.3 |
Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application asso
|
08-08-2017 - 01:32 | 17-12-2008 - 01:30 | |
| CVE-2008-4224 | 7.1 |
UDF in Apple Mac OS X before 10.5.6 allows user-assisted attackers to cause a denial of service (system crash) via a malformed UDF volume in a crafted ISO file.
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4220 | 10.0 |
Integer overflow in the inet_net_pton API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. NOTE: this may be related t
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4237 | 10.0 |
Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4236 | 7.1 |
Apple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a denial of service (infinite loop) via a crafted embedded font in a PDF file.
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4223 | 10.0 |
Podcast Producer in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors.
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4219 | 4.9 |
The kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service (infinite loop and system halt) by running an application that is dynamically linked to libraries on an NFS server, related to occurrence of an exception in th
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4217 | 9.3 |
Integer signedness error in BOM in Apple Mac OS X before 10.5.6 allows remote attackers to execute arbitrary code via the headers in a crafted CPIO archive, leading to a stack-based buffer overflow.
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4221 | 10.0 |
The strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted date string, related to improper memory al
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4222 | 7.1 |
natd in network_cmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows remote attackers to cause a denial of service (infinite loop) via a crafted TCP packet.
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 | |
| CVE-2008-4218 | 7.2 |
Multiple integer overflows in the kernel in Apple Mac OS X before 10.5.6 on Intel platforms allow local users to gain privileges via a crafted call to (1) i386_set_ldt or (2) i386_get_ldt.
|
08-03-2011 - 03:12 | 17-12-2008 - 01:30 |