Lucene search

K
cve[email protected]CVE-2004-0821
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-0821

2004-12-3105:00:00
web.nvd.nist.gov
25
cve-2004-0821
cfplugin
core foundation framework
mac os x
user supplied libraries
local users
privileges

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.7%

The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges.

Affected configurations

NVD
Node
applemac_os_xMatch10.2.8
OR
applemac_os_xMatch10.3.4
OR
applemac_os_xMatch10.3.5
OR
applemac_os_x_serverMatch10.2.8
OR
applemac_os_x_serverMatch10.3.4
OR
applemac_os_x_serverMatch10.3.5

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.7%

Related for CVE-2004-0821