CVE-2005-2522

Опубликовано: 19 авг. 2005

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.

Ссылки

http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Patch
Vendor Advisory
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/420316
Third Party Advisory
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-229A.html
Third Party Advisory
US Government Resource
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Patch
Vendor Advisory
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/420316
Third Party Advisory
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-229A.html
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02862

Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-vfj3-xr4w-743w

github

почти 4 года назад