CVE-2005-2747 - Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Sa

CVE-2005-2747

Summary

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file.

References

http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
http://secunia.com/advisories/16920/
http://securitytracker.com/alerts/2005/Sep/1014958.html
http://www.auscert.org.au/5509
http://www.ciac.org/ciac/bulletins/p-312.shtml
http://www.kb.cert.org/vuls/id/650681
http://www.securityfocus.com/bid/14914
https://exchange.xforce.ibmcloud.com/vulnerabilities/22381

Vulnerable Configurations

cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

apple	APPLE-SA-2005-09-22
auscert	ESB-2005.0732
bid	14914
cert-vn	VU#650681
ciac	P-312
sectrack	1014958
secunia	16920
xf	macos-imageio-bo(22381)

Last major update

11-07-2017 - 01:32

Published

25-10-2005 - 22:06

Last modified

11-07-2017 - 01:32