PT-2004-1884 · Apple · Corefoundation+1

Published 2004-09-07 · Updated 2017-07-11 · CVE-2004-0822

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.2.8, 10.3.4, and 10.3.5

Description A buffer overflow issue in the Core Foundation framework allows local users to execute arbitrary code via a certain environment variable.

Recommendations For Mac OS X version 10.2.8, update to a version that includes the fix for this issue. For Mac OS X version 10.3.4, update to a version that includes the fix for this issue. For Mac OS X version 10.3.5, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2004-0822

Affected Products

Corefoundation

Macos X

References · 7

• http://securityfocus.com/advisories/7148 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0822 · Security Note
• http://securityfocus.com/bid/11136 · Note
• http://kb.cert.org/vuls/id/545446 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17295 · Note
• http://secunia.com/advisories/12491 · Note
• http://ciac.org/ciac/bulletins/o-212.shtml · Note