First published: Wed May 04 2005(Updated: )
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple AppleScript | =2.0.0 | |
Apple macOS Server | =10.3.2 | |
Apple macOS Server | =10.3.7 | |
Apple macOS Server | =10.3.5 | |
Apple iOS and macOS | =10.3.1 | |
Apple iOS and macOS | =10.3.5 | |
Apple macOS Server | =10.3.3 | |
Apple macOS Server | =10.3.4 | |
Apple iOS and macOS | =10.3.2 | |
Apple iOS and macOS | =10.3.7 | |
Apple iOS and macOS | =10.3.6 | |
Apple macOS Server | =10.3 | |
Apple macOS Server | =10.3.8 | |
Apple macOS Server | =10.3.9 | |
Apple iOS and macOS | =10.3.8 | |
Apple macOS Server | =10.3.1 | |
Apple iOS and macOS | =10.3.9 | |
Apple iOS and macOS | =10.3.4 | |
Apple iOS and macOS | =10.3.3 | |
Apple iOS and macOS | =10.3 | |
Apple macOS Server | =10.3.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1331 is categorized as a moderate severity vulnerability.
To fix CVE-2005-1331, users should update their AppleScript Editor to the latest version provided by Apple.
CVE-2005-1331 affects Mac OS X versions 10.3 to 10.3.9 and the corresponding server versions.
CVE-2005-1331 is a security vulnerability related to improper code display in AppleScript Editor.
Yes, CVE-2005-1331 can potentially enable remote attackers to execute malicious code on a user's system.