Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.2.8 (including) | 10.2.8 (including) |
| Mac_os_x | Apple | 10.3.4 (including) | 10.3.4 (including) |
| Mac_os_x | Apple | 10.3.5 (including) | 10.3.5 (including) |
| Mac_os_x_server | Apple | 10.2.8 (including) | 10.2.8 (including) |
| Mac_os_x_server | Apple | 10.3.4 (including) | 10.3.4 (including) |
| Mac_os_x_server | Apple | 10.3.5 (including) | 10.3.5 (including) |
References
- http://secunia.com/advisories/12491/
- http://www.ciac.org/ciac/bulletins/o-212.shtml
- http://www.kb.cert.org/vuls/id/545446
- http://www.securityfocus.com/advisories/7148
- http://www.securityfocus.com/bid/11136
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17295
- http://secunia.com/advisories/12491/
- http://www.ciac.org/ciac/bulletins/o-212.shtml
- http://www.kb.cert.org/vuls/id/545446
- http://www.securityfocus.com/advisories/7148
- http://www.securityfocus.com/bid/11136
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17295