PT-2005-2886 · Apple · Macos X Tiger

Mithras.The.Prophet · Published 2005-06-09 · Updated 2008-09-05 · CVE-2005-1933

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X Tiger version 10.4

Description The issue allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a user widget with the same bundle identifier (CFBundleIdentifier).

Recommendations For Apple Mac OS X Tiger version 10.4, consider restricting the use of user widgets to minimize the risk of exploitation. As a temporary workaround, avoid using widgets with the same bundle identifier (CFBundleIdentifier) as system widgets until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2005-1933

Affected Products

Macos X Tiger

References · 3

• 🔥 http://www1.cs.columbia.edu/~aaron/files/widgets · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1933 · Security Note
• http://kb.cert.org/vuls/id/983429 · Note