CVE-2004-0822 - Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable

Back Back to CVE browser

HIGH

Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable

Published Sep 24, 2004

7.2

HIGH

CVSS 2.0

EPSS 0.53%

Description

Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/12491/
third-party-advisoryx_refsource_SECUNIA
http://www.ciac.org/ciac/bulletins/o-212.shtml
third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.kb.cert.org/vuls/id/545446
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.securityfocus.com/advisories/7148
vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/bid/11136
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/17295
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/12491/		third-party-advisoryx_refsource_SECUNIA
http://www.ciac.org/ciac/bulletins/o-212.shtml		third-party-advisorygovernment-resourcex_refsource_CIAC
http://www.kb.cert.org/vuls/id/545446		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.securityfocus.com/advisories/7148		vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/bid/11136		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/17295		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 24, 2004

Updated Aug 8, 2024

Reserved Aug 27, 2004

Link CVE-2004-0822

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2004-0822

Red Hat

Severity n/a

Public date n/a

Links CVE-2004-0822