RETIRED: Apple Mac OS X Prior to 10.6.7 Multiple Security Vulnerabilities

RETIRED: Apple Mac OS X Prior to 10.6.7 Multiple Security Vulnerabilities

Apple Mac OS X is prone to multiple security vulnerabilities that have been addressed in Security Update 2011-001.

The update addresses new vulnerabilities that affect AirPort, AppleScript, ATS, CarbonCore, CoreText, HFS, ImageIO, Image RAW, Installer, kernel, Libinfo, QuickLook, QuickTime, Ruby, and Terminal.

These issues affect OS X prior to 10.6.7.

This BID is being retired. The following individual records exist to better document the issues:

46965 Apple Mac OS X QuickLook Remote Code Execution Vulnerability
46966 Ruby 'BigDecimal' Class Integer Truncation Remote Code Execution Vulnerability
46971 Apple Mac OS X Type 1 Embedded Fonts Multiple Buffer Overflow Vulnerabilities
46972 Apple Mac OS X Image RAW Multiple Buffer Overflow Vulnerabilities
46973 Apple Mac OS X JPEG-encoded TIFF Images Integer Overflow Vulnerability
46982 Apple Mac OS X HFS Subsystem Information Disclosure Vulnerability
46984 Apple Mac OS X AppleScript Remote Format String Vulnerability
46987 Apple Mac OS X ATS Heap Based Buffer Overflow Vulnerability
46988 Apple Mac OS X AirPort Denial of Service Vulnerability
46989 Apple Mac OS X CarbonCore 'FSFindFolder()' Information Disclosure Vulnerability
46990 Apple Mac OS X Libinfo Denial of Service Vulnerability
46991 Apple Mac OS X TrueType Embedded Fonts Multiple Buffer Overflow Vulnerabilities
46992 Apple Mac OS X QuickTime Cross Domain Information Disclosure Vulnerability
46993 Apple Mac OS X CoreText Memory Corruption Vulnerability
46994 Apple Mac OS X SFNT Tables Multiple Buffer Overflow Vulnerabilities
46995 Apple QuickTime (CVE-2011-0186) JPEG2000 Image Multiple Memory Corruption Vulnerabilities
46996 Apple Mac OS X ImageIO Integer Overflow Vulnerability
46997 Apple Mac OS X 'i386_set_ldt()' Privilege Escalation Vulnerability
47023 Apple Mac OS X Install Helper Arbitrary Agent Installation Input Validation Vulnerability