# CVEs published 2013-06-05 34 CVEs were published on June 5, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-0975](https://cve.now/CVE-2013-0975.md): Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of (no CVSS) - [CVE-2013-0982](https://cve.now/CVE-2013-0982.md): The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safar (no CVSS) - [CVE-2013-0983](https://cve.now/CVE-2013-0983.md): Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause (no CVSS) - [CVE-2013-0984](https://cve.now/CVE-2013-0984.md): Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon cr (no CVSS) - [CVE-2013-0985](https://cve.now/CVE-2013-0985.md): Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to ca (no CVSS) - [CVE-2013-0990](https://cve.now/CVE-2013-0990.md): SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a (no CVSS) - [CVE-2013-1009](https://cve.now/CVE-2013-1009.md): WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2013-1012](https://cve.now/CVE-2013-1012.md): Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2013-1013](https://cve.now/CVE-2013-1013.md): XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form (no CVSS) - [CVE-2013-1023](https://cve.now/CVE-2013-1023.md): WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2013-1024](https://cve.now/CVE-2013-1024.md): CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows re (no CVSS) - [CVE-2013-3948](https://cve.now/CVE-2013-3948.md): Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployment installation dialo (no CVSS) - [CVE-2013-3949](https://cve.now/CVE-2013-3949.md): The posix\_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of the \_POSIX\_SPAWN\_DISABLE\_ASLR and \_POSIX\_SPAW (no CVSS) - [CVE-2013-3950](https://cve.now/CVE-2013-3950.md): Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier (no CVSS) - [CVE-2013-3951](https://cve.now/CVE-2013-3951.md): sys/openbsd/stack\_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings employed in the user- (no CVSS) - [CVE-2013-3952](https://cve.now/CVE-2013-3952.md): The fill\_pipeinfo function in bsd/kern/sys\_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protecti (no CVSS) - [CVE-2013-3953](https://cve.now/CVE-2013-3953.md): The mach\_port\_space\_info function in osfmk/ipc/mach\_debug.c in the XNU kernel in Apple Mac OS X 10.8.x does not initialize a certain structu (no CVSS) - [CVE-2013-3954](https://cve.now/CVE-2013-3954.md): The posix\_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate the data for file actions and port actions (no CVSS) - [CVE-2013-3955](https://cve.now/CVE-2013-3955.md): The get\_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of (no CVSS) - [CVE-2013-0508](https://cve.now/CVE-2013-0508.md): Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 and 4 (no CVSS) - [CVE-2013-0509](https://cve.now/CVE-2013-0509.md): Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0. (no CVSS) - [CVE-2013-3475](https://cve.now/CVE-2013-3475.md): Stack-based buffer overflow in db2aud in the Audit Facility in IBM DB2 and DB2 Connect 9.1, 9.5, 9.7, 9.8, and 10.1, as used in Smart Analyt (no CVSS) - [CVE-2013-2854](https://cve.now/CVE-2013-2854.md): Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows (no CVSS) - [CVE-2013-2855](https://cve.now/CVE-2013-2855.md): The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or po (no CVSS) - [CVE-2013-2856](https://cve.now/CVE-2013-2856.md): Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have uns (no CVSS) - [CVE-2013-2857](https://cve.now/CVE-2013-2857.md): Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have uns (no CVSS) - [CVE-2013-2858](https://cve.now/CVE-2013-2858.md): Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a deni (no CVSS) - [CVE-2013-2859](https://cve.now/CVE-2013-2859.md): Google Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified (no CVSS) - [CVE-2013-2860](https://cve.now/CVE-2013-2860.md): Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have uns (no CVSS) - [CVE-2013-2861](https://cve.now/CVE-2013-2861.md): Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of se (no CVSS) - [CVE-2013-2862](https://cve.now/CVE-2013-2862.md): Skia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration, which allows remote attackers to cause a den (no CVSS) - [CVE-2013-2863](https://cve.now/CVE-2013-2863.md): Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a (no CVSS) - [CVE-2013-2864](https://cve.now/CVE-2013-2864.md): The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or (no CVSS) - [CVE-2013-2865](https://cve.now/CVE-2013-2865.md): Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.110 allow attackers to cause a denial of service or possibly have oth (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-06-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.