CVE-2004-0822: Buffer Overflow
Published Sep 7, 2004
·Updated
Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.
Affected Software
6 affected components
Apple iOS and macOS=10.2.8
Apple Mac OS X Server=10.3.5
Apple iOS and macOS=10.3.5
Apple Mac OS X Server=10.3.4
Apple iOS and macOS=10.3.4
Apple Mac OS X Server=10.2.8
Event History
Sep 7, 2004
CVE Published
04:00 AM
Sep 24, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0822?
CVE-2004-0822 is classified as a critical vulnerability due to its potential to allow local users to execute arbitrary code.
2
How do I fix CVE-2004-0822?
To mitigate CVE-2004-0822, it is recommended to update to a later version of Mac OS X that addresses this vulnerability.
3
Who is affected by CVE-2004-0822?
CVE-2004-0822 affects local users on Mac OS X versions 10.2.8, 10.3.4, and 10.3.5.
4
What causes CVE-2004-0822?
CVE-2004-0822 is caused by a buffer overflow in the Core Foundation framework due to improper handling of an environment variable.
5
Can CVE-2004-0822 be exploited remotely?
No, CVE-2004-0822 can only be exploited locally by users with access to the system.