CVE-2005-0716

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-0716
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable.

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html Vendor Advisory
http://www.idefense.com/application/poi/display?id=219&type=vulnerabilities Vendor Advisory
http://www.securityfocus.com/bid/13224
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html Vendor Advisory
http://www.idefense.com/application/poi/display?id=219&type=vulnerabilities Vendor Advisory
http://www.securityfocus.com/bid/13224
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*
History

20 Nov 2024, 23:55

Type Values Removed Values Added
References () http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - Vendor Advisory () http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - Vendor Advisory
References () http://www.idefense.com/application/poi/display?id=219&type=vulnerabilities - Vendor Advisory () http://www.idefense.com/application/poi/display?id=219&type=vulnerabilities - Vendor Advisory
References () http://www.securityfocus.com/bid/13224 - () http://www.securityfocus.com/bid/13224 -
Information

Published : 2005-03-21 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2005-0716

Mitre link : CVE-2005-0716

CVE.ORG link : CVE-2005-0716

JSON object : View

Products Affected

apple

  • mac_os_x
  • mac_os_x_server
CWE
NVD-CWE-Other