Lucene search
HistorySep 24, 2004 - 4:00 a.m.
CVE-2004-0822
cve-2004-0822
buffer overflow
core foundation framework
mac os x
arbitrary code execution
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.8%
Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.
Affected configurations
Node
applemac_os_xMatch10.2.8
ORapplemac_os_xMatch10.3.4
ORapplemac_os_xMatch10.3.5
ORapplemac_os_x_serverMatch10.2.8
ORapplemac_os_x_serverMatch10.3.4
ORapplemac_os_x_serverMatch10.3.5
Related
cert
cert
Apple Mac OS X CoreFoundation contains a buffer overflow vulnerability
2004-09-09 00:00:00
cvelist
cvelist
CVE-2004-0822
2004-09-24 04:00:00
nvd
nvd
CVE-2004-0822
2004-09-07 04:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2004-09-07)
2004-09-08 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.8%
Related for CVE-2004-0822