CVE-2005-2501

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted Rich Text Format (RTF) file.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlPatch
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlPatch
http://securitytracker.com/id?1014695
http://www.kb.cert.org/vuls/id/435188Patch, Third Party Advisory, US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-229A.htmlPatch, Third Party Advisory, US Government Resource
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlPatch
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlPatch
http://securitytracker.com/id?1014695
http://www.kb.cert.org/vuls/id/435188Patch, Third Party Advisory, US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-229A.htmlPatch, Third Party Advisory, US Government Resource

Timeline

Published: Aug 19, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-25025.1Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers CVE-2005-25034.6AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur CVE-2005-25047.2The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with "Requires Authentication: No" even when the user has selected the "Req CVE-2005-25057.5Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application CVE-2005-25065.0Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service (CPU cons CVE-2005-25077.5Buffer overflow in Directory Services in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.CVE-2005-25084.6dsidentity in Directory Services in Mac OS X 10.4.2 allows local users to add or remove user accounts.CVE-2005-25092.1Unknown vulnerability in loginwindow in Mac OS X 10.4.2 and earlier, when Fast User Switching is enabled, allows attackers to log into other CVE-2005-25104.6The Server Admin tool in servermgr_ipfilter for Mac OS X 10.4 to 10.4.2, when using multiple subnets and Address Groups, does not always pro CVE-2005-251110.0Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a roo CVE-2005-25122.1Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences sta CVE-2005-25135.0Unknown vulnerability in HItoolbox for Mac OS X 10.4.2 allows VoiceOver services to read secure input fields.