vulnwire
7.2high

CVE-2005-07162 exploits

Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 64%
Public exploits
2
Exploit-DB

Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH environment variable.

Exploit prediction (EPSS)

1.05% probability of exploitation in the next 30 days, higher than 64% of all scored CVEs.

Exploits and detections

  • EDB-896 Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow / Local Privilege Escalation · local · 2005-03-22
  • EDB-2111 Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow (2) · local · 2006-08-02

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • lists.apple.com /archives/security-announce/2005/Mar/msg00000.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • securityfocus.com /bid/13224 · vdb-entry, x_refsource_BID, x_transferred
  • idefense.com /application/poi/display?id=219&type=vulnerabilities · third-party-advisory, x_refsource_IDEFENSE, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.