Lucene search

MitreCVE-2004-0873

HistoryDec 23, 2004 - 5:00 a.m.

CVE-2004-0873

2004-12-2305:00:00

mitre

web.nvd.nist.gov

apple

ichat

remote code execution

cve-2004-0873

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.005

Percentile

76.2%

JSON

Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a “link” that references the program.

Affected configurations

Nvd

Node

appleichatMatch1.0.1

appleichat_avMatch2.0

appleichat_avMatch2.1

VendorProductVersionCPE
appleichat1.0.1cpe:2.3:a:apple:ichat:1.0.1:*:*:*:*:*:*:*
appleichat_av2.0cpe:2.3:a:apple:ichat_av:2.0:*:*:*:*:*:*:*
appleichat_av2.1cpe:2.3:a:apple:ichat_av:2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	ichat	1.0.1	cpe:2.3:a:apple:ichat:1.0.1:::::::*
apple	ichat_av	2.0	cpe:2.3:a:apple:ichat_av:2.0:::::::*
apple	ichat_av	2.1	cpe:2.3:a:apple:ichat_av:2.1:::::::*

References

lists.apple.com/archives/security-announce/2004/Sep/msg00001.html

exchange.xforce.ibmcloud.com/vulnerabilities/17420

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.005

Percentile

76.2%

JSON

Related for CVE-2004-0873