Vulnetix
Try Vulnetix Request Demo
Apple Security Advisories · August 2005 — Apple Security Advisories
26 advisories 26 CVEs

Apple-vendor CVEs for 2005-08. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

Back to archive Open Console

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

How Vulnetix ranks risk Get a free API key

Advisories

CVE-2005-2507

macOSEPSS <= 49%CRITICAL2005-08-19

Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

CVEs:CVE-2005-2507

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2518

macOSEPSS <= 49%CRITICAL2005-08-19

Buffer overflow in servermgrd in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

CVEs:CVE-2005-2518

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2516

macOSEPSS <= 49%CRITICAL2005-08-19

Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands.

CVEs:CVE-2005-2516

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
safari affected apple — —
Upstream advisory

CVE-2005-2522

macOSEPSS <= 49%CRITICAL2005-08-19

Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.

CVEs:CVE-2005-2522

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
safari affected apple — —
Upstream advisory

CVE-2005-2501

macOSEPSS <= 49%CRITICAL2005-08-19

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file.

CVEs:CVE-2005-2501

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2502

macOSEPSS <= 49%CRITICAL2005-08-19

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file.

CVEs:CVE-2005-2502

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2594

macOSEPSS <= 49%HIGH2005-08-17

Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javascript, possibly involving a function that defines a handler for itself within the function body.

CVEs:CVE-2005-2594

Affected products

ProductStatusVendorPackageEcosystem
safari affected apple — —
Upstream advisory

CVE-2005-2514

macOSEPSS <= 49%HIGH2005-08-19

Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.

CVEs:CVE-2005-2514

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2505

macOSEPSS <= 49%CRITICAL2005-08-19

Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation.

CVEs:CVE-2005-2505

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2511

macOSEPSS <= 49%HIGH2005-08-19

Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a root Terminal window.

CVEs:CVE-2005-2511

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2525

macOSEPSS <= 49%HIGH2005-08-19

CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt).

CVEs:CVE-2005-2525

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2526

macOSEPSS <= 49%HIGH2005-08-19

CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection.

CVEs:CVE-2005-2526

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2523

macOSEPSS <= 49%CRITICAL2005-08-19

Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVEs:CVE-2005-2523

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
weblog_server affected apple — —
Upstream advisory

CVE-2005-2506

macOSEPSS <= 49%HIGH2005-08-19

Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service (CPU consumption) via crafted Gregorian dates.

CVEs:CVE-2005-2506

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2513

macOSEPSS <= 49%MEDIUM2005-08-19

Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields.

CVEs:CVE-2005-2513

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2517

macOSEPSS <= 49%LOW2005-08-19

Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.

CVEs:CVE-2005-2517

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
safari affected apple — —
Upstream advisory

CVE-2005-2508

macOSEPSS <= 49%MEDIUM2005-08-19

dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.

CVEs:CVE-2005-2508

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2521

macOSEPSS <= 49%HIGH2005-08-19

Buffer overflow in traceroute in Mac OS X 10.3.9 allows local users to execute arbitrary code via unknown vectors.

CVEs:CVE-2005-2521

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2504

macOSEPSS <= 49%HIGH2005-08-19

The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with "Requires Authentication: No" even when the user has selected the "Require pairing for security" option, which could confuse users about which setting is valid.

CVEs:CVE-2005-2504

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2520

macOSEPSS <= 49%LOW2005-08-19

The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.

CVEs:CVE-2005-2520

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2509

macOSEPSS <= 49%LOW2005-08-19

Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attackers to log into other accounts if they know the passwords to at least two accounts.

CVEs:CVE-2005-2509

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2503

macOSEPSS <= 49%MEDIUM2005-08-19

AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window.

CVEs:CVE-2005-2503

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2510

macOSEPSS <= 49%MEDIUM2005-08-19

The Server Admin tool in servermgr_ipfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always properly write firewall rules to the Active Rules when certain conditions occur, which could result in firewall pol...

CVEs:CVE-2005-2510

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x_server affected apple — —
Upstream advisory

CVE-2005-2512

macOSEPSS <= 49%LOW2005-08-19

Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences state otherwise, which could result in a privacy leak.

CVEs:CVE-2005-2512

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
mail affected apple — —
Upstream advisory

CVE-2005-2515

macOSEPSS <= 49%MEDIUM2005-08-19

Quartz Composer Screen Saver in Mac OS X 10.4.2 allows local users to access links from the RSS Visualizer even when a password is required.

CVEs:CVE-2005-2515

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

CVE-2005-2519

macOSEPSS <= 49%HIGH2005-08-19

slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges.

CVEs:CVE-2005-2519

Affected products

ProductStatusVendorPackageEcosystem
mac_os_x affected apple — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console