CVE-2005-1330: Input Validation
Published May 4, 2005
·Updated
AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception.
Affected Software
2 affected components
Apple Mac OS X Server=10.3.9
Apple iOS and macOS=10.3.9
Event History
May 4, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1330?
CVE-2005-1330 is considered a denial-of-service vulnerability that can cause Cocoa applications to crash.
2
How do I fix CVE-2005-1330?
To fix CVE-2005-1330, update to a later version of Mac OS X that addresses the TIFF image handling vulnerability.
3
Which versions of macOS are affected by CVE-2005-1330?
CVE-2005-1330 affects Mac OS X version 10.3.9.
4
What types of attacks does CVE-2005-1330 enable?
CVE-2005-1330 enables attackers to crash Cocoa applications by exploiting malformed TIFF images.
5
Can CVE-2005-1330 be exploited remotely?
Yes, attackers can exploit CVE-2005-1330 by delivering a malicious TIFF image to a user, causing a denial of service.