CVE-2005-1342: High severity Apple Terminal vulnerability
Published May 4, 2005
·Updated
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.
Affected Software
11 affected components
Apple Terminal=1.4.4
Apple iOS and macOS=10.3.1
Apple iOS and macOS=10.3.5
Apple iOS and macOS=10.3.2
Apple iOS and macOS=10.3.7
Apple iOS and macOS=10.3.6
Apple iOS and macOS=10.3.8
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.3.4
Apple iOS and macOS=10.3.3
Apple iOS and macOS=10.3
Remediation
Patch Available
Patch Available
Event History
May 4, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1342?
CVE-2005-1342 has a medium severity level as it allows remote attackers to execute arbitrary commands.
2
How do I fix CVE-2005-1342?
To mitigate CVE-2005-1342, users should update the affected version of Apple Terminal to the latest available version.
3
Which versions of Apple Terminal are affected by CVE-2005-1342?
CVE-2005-1342 affects Apple Terminal version 1.4.4 running on Mac OS X 10.3.9 and earlier versions.
4
Can CVE-2005-1342 affect my Mac if I don't use Apple Terminal?
If you do not use Apple Terminal or the x-man-page URI handler, your system is not susceptible to CVE-2005-1342.
5
Is there a workaround for CVE-2005-1342 if I cannot update?
A potential workaround for CVE-2005-1342 is to avoid using the x-man-page URI handler in the affected versions.