CVE-2004-0485

Mac OS X 10.2.8-10.3.3 - Arbitrary File Write via Disk Image Mounting

Title source: manual

Description

The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.

References (6)

Core 6

Core References

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/11622/

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/210606

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/mhonarc/security-announce/msg00053.html

Various Sources vendor-advisory x_refsource_apple

http://lists.seifried.org/pipermail/security/2004-May/003743.html

Vendor Advisory x_refsource_misc

http://fundisom.com/owned/warning

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/16166

Scores

EPSS 0.0292

EPSS Percentile 85.6%

Details

Status published

Products (2)

apple/mac_os_x 10.2.8

apple/mac_os_x 10.3.3

Published Jul 07, 2004

Tracked Since Feb 18, 2026