Lucene search

[email protected]CVE-2005-1331

HistoryMay 04, 2005 - 4:00 a.m.

CVE-2005-1331

2005-05-0404:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1331

applescript editor

mac os x 10.3.9

uri

code display

remote code execution

security vulnerability

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.

Affected configurations

NVD

Node

appleapplescriptMatch2.0.0

Node

applemac_os_xMatch10.3

applemac_os_xMatch10.3.1

applemac_os_xMatch10.3.2

applemac_os_xMatch10.3.3

applemac_os_xMatch10.3.4

applemac_os_xMatch10.3.5

applemac_os_xMatch10.3.6

applemac_os_xMatch10.3.7

applemac_os_xMatch10.3.8

applemac_os_xMatch10.3.9

applemac_os_x_serverMatch10.3

applemac_os_x_serverMatch10.3.1

applemac_os_x_serverMatch10.3.2

applemac_os_x_serverMatch10.3.3

applemac_os_x_serverMatch10.3.4

applemac_os_x_serverMatch10.3.5

applemac_os_x_serverMatch10.3.6

applemac_os_x_serverMatch10.3.7

applemac_os_x_serverMatch10.3.8

applemac_os_x_serverMatch10.3.9

CPENameOperatorVersion
apple:applescriptapple applescripteq2.0.0

CPE	Name	Operator	Version
apple:applescript	apple applescript	eq	2.0.0

References

lists.apple.com/archives/security-announce/2005/May/msg00001.html

remahl.se/david/vuln/010/

secunia.com/advisories/15227

www.securityfocus.com/bid/13480

www.vupen.com/english/advisories/2005/0455

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

Related for CVE-2005-1331

cvelist1 nvd1 securityvulns1 nessus1