CVE-2004-0485

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://fundisom.com/owned/warningVendor Advisory
http://lists.apple.com/mhonarc/security-announce/msg00053.html
http://lists.seifried.org/pipermail/security/2004-May/003743.html
http://secunia.com/advisories/11622/Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/210606Patch, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/16166
http://fundisom.com/owned/warningVendor Advisory
http://lists.apple.com/mhonarc/security-announce/msg00053.html
http://lists.seifried.org/pipermail/security/2004-May/003743.html
http://secunia.com/advisories/11622/Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/210606Patch, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/16166

Timeline

Published: Jul 7, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-04867.6HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an CVE-2004-048710.0A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and CVE-2004-04887.5Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust t CVE-2004-04897.6Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbit CVE-2004-04907.2cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php CVE-2004-04912.1The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages th CVE-2004-049210.0Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (pr CVE-2004-04936.4The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and p CVE-2004-04947.5Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized a CVE-2004-04957.2Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the S CVE-2004-04967.2Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulner CVE-2004-04972.1Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.