CVE-2005-2516

Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-08-19

Last modified

2024-09-16

Affected products

• Mac Os X (Apple)
• Safari (Apple)

References

• http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
• http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
• http://www.kb.cert.org/vuls/id/709220
• http://www.us-cert.gov/cas/techalerts/TA05-229A.html