PT-2004-1884 · Apple · Corefoundation+1

Publicado 2004-09-07 · Atualizado 2017-07-11 · CVE-2004-0822

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.2.8, 10.3.4, and 10.3.5

Description A buffer overflow issue in the Core Foundation framework allows local users to execute arbitrary code via a certain environment variable.

Recommendations For Mac OS X version 10.2.8, update to a version that includes the fix for this issue. For Mac OS X version 10.3.4, update to a version that includes the fix for this issue. For Mac OS X version 10.3.5, update to a version that includes the fix for this issue.

Correção

Identificadores relacionados

CVE-2004-0822

Produtos afetados

Corefoundation

Macos X

Referências · 7

• http://securityfocus.com/bid/11136 · Nota
• http://kb.cert.org/vuls/id/545446 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17295 · Nota
• http://securityfocus.com/advisories/7148 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0822 · Nota de Segurança
• http://secunia.com/advisories/12491 · Nota
• http://ciac.org/ciac/bulletins/o-212.shtml · Nota