Cfnetwork (Apple) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2011-07-21. Vendor: Apple.

CVEs of Cfnetwork

• CVE-2010-1383 - CVSS 9.3 (critical), 2011-07-21: CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user,…
• CVE-2011-0214 - CVSS 5 (medium), 2011-07-21: CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web…
• CVE-2010-1420 - CVSS 4.3 (medium), 2011-07-21: Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a…
• CVE-2010-1800 - CVSS 5 (medium), 2010-08-25: CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection…
• CVE-2007-2403 - CVSS 6.8 (medium), 2007-08-03: CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary…