CVE-2004-0485: Medium severity Apple iOS and macOS vulnerability
Published May 28, 2004
·Updated
The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.
Affected Software
2 affected components
Apple iOS and macOS=10.2.8
Apple iOS and macOS=10.3.3
Remediation
Patch Available
Patch Available
Event History
May 28, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0485?
CVE-2004-0485 is considered a high severity vulnerability due to the potential for remote file writing.
2
How do I fix CVE-2004-0485?
To fix CVE-2004-0485, users should upgrade their Mac OS X to a version that is not affected, beyond 10.3.3 and 10.2.8.
3
Who is affected by CVE-2004-0485?
CVE-2004-0485 affects users running Mac OS X 10.2.8 and 10.3.3.
4
What type of attack does CVE-2004-0485 enable?
CVE-2004-0485 enables remote attackers to execute arbitrary file writing attacks via mounted disk images.
5
Is there a workaround for CVE-2004-0485?
There are no known workarounds for CVE-2004-0485; upgrading the system is the recommended approach.