CVE-2005-0716: Buffer Overflow

Published Mar 21, 2005

Updated

Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CFCHARSETPATH environment variable.

Affected Software

16 affected components

Apple Mac OS X Server=10.3.2

Apple Mac OS X Server=10.3.5

Apple iOS and macOS=10.3.1

Apple iOS and macOS=10.3.5

Apple Mac OS X Server=10.3.3

Apple Mac OS X Server=10.3.4

Apple iOS and macOS=10.3.2

Apple iOS and macOS=10.3.7

Apple iOS and macOS=10.3.6

Apple Mac OS X Server=10.3

Apple iOS and macOS=10.3.8

Apple Mac OS X Server=10.3.1

Apple iOS and macOS=10.3.4

Apple iOS and macOS=10.3.3

Apple iOS and macOS=10.3

Apple Mac OS X Server=10.3.6

Event History

Mar 21, 2005

CVE Published

05:00 AM

Mar 22, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0716?

CVE-2005-0716 is classified as a high severity vulnerability due to its potential to allow local users to execute arbitrary code.

How do I fix CVE-2005-0716?

To fix CVE-2005-0716, users should upgrade their Mac OS X versions to at least 10.3.7 where the vulnerability is addressed.

What versions of Mac OS X are affected by CVE-2005-0716?

CVE-2005-0716 affects Mac OS X versions 10.3.1 to 10.3.6, including Server editions.

Can CVE-2005-0716 be exploited remotely?

CVE-2005-0716 cannot be exploited remotely as it requires local access to the system.

What is the nature of the vulnerability in CVE-2005-0716?

CVE-2005-0716 is a stack-based buffer overflow vulnerability that can be triggered by an overly long CF_CHARSET_PATH environment variable.