CVE-2005-2757: Buffer Overflow
Published Dec 1, 2005
·Updated
Heap-based buffer overflow in CoreFoundation in Mac OS X and OS X Server 10.4 through 10.4.3 allows remote attackers to execute arbitrary code via unknown attack vectors involving "validation of URLs."
Affected Software
28 affected components
Apple iOS and macOS=10.4.3
Apple Mac OS X Server=10.4.3
Apple Mac OS X Server=10.3.2
Apple Mac OS X Server=10.3.7
Apple Mac OS X Server=10.3.5
Apple iOS and macOS=10.3.1
Apple iOS and macOS=10.3.5
Apple iOS and macOS=10.4.1
Apple Mac OS X Server=10.4.2
Apple Mac OS X Server=10.3.3
Apple Mac OS X Server=10.4.1
Apple Mac OS X Server=10.3.4
Apple iOS and macOS=10.3.2
Apple iOS and macOS=10.3.7
Apple Mac OS X Server=10.4
Apple iOS and macOS=10.3.6
Apple Mac OS X Server=10.3
Apple Mac OS X Server=10.3.8
Apple iOS and macOS=10.4
Apple Mac OS X Server=10.3.9
Apple iOS and macOS=10.3.8
Apple Mac OS X Server=10.3.1
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.3.4
Apple iOS and macOS=10.3.3
Apple iOS and macOS=10.4.2
Apple iOS and macOS=10.3
Apple Mac OS X Server=10.3.6
Remediation
Patch Available
Patch Available
Event History
Dec 1, 2005
CVE Published
02:07 AM
CVE Published
via MITRE·07:02 AM
Data Sourced
via MITRE·07:02 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2757?
CVE-2005-2757 is categorized as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2005-2757?
To mitigate CVE-2005-2757, update your macOS or OS X Server to the latest patched version provided by Apple.
3
What software versions are affected by CVE-2005-2757?
CVE-2005-2757 affects specific versions of Mac OS X and OS X Server, particularly versions 10.3.x and 10.4.x.
4
Can CVE-2005-2757 be exploited remotely?
Yes, CVE-2005-2757 can be exploited remotely through unspecified attack vectors, making it highly dangerous.
5
What type of vulnerability is CVE-2005-2757?
CVE-2005-2757 is identified as a heap-based buffer overflow vulnerability.