|
306061
|
- |
|
apple
|
mac_os_x_server mac_os_x
|
Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document.
|
CWE-189
Numeric Errors
|
CVE-2011-3437
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306062
|
- |
|
apple
|
mac_os_x_server mac_os_x
|
Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-ch…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-3436
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306063
|
- |
|
apple
|
mac_os_x_server mac_os_x
|
Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors.
|
CWE-255
Credentials Management
|
CVE-2011-3435
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306064
|
- |
|
apple
|
iphone_os
|
The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
|
CWE-255
Credentials Management
|
CVE-2011-3434
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306065
|
- |
|
apple
|
iphone_os
|
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog.
|
CWE-399
Resource Management Errors
|
CVE-2011-3432
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306066
|
- |
|
apple
|
iphone_os
|
The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state informati…
|
CWE-200
Information Exposure
|
CVE-2011-3431
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306067
|
- |
|
apple
|
iphone_os
|
The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to ha…
|
NVD-CWE-Other
|
CVE-2011-3430
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306068
|
- |
|
apple
|
iphone_os
|
The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, which might allow physically proximate attackers to obtain sensitive information…
|
CWE-255
Credentials Management
|
CVE-2011-3429
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306069
|
- |
|
apple
|
apple_tv iphone_os
|
The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-midd…
|
CWE-200
Information Exposure
|
CVE-2011-3427
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
306070
|
- |
|
apple
|
iphone_os
|
Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment"…
|
CWE-79
Cross-site Scripting
|
CVE-2011-3426
|
2024-11-21 10:30 |
2011-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|