Vulnerability in Apple Mac OS X

CVE-2005-1933

Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to execute arbitrary commands by overriding the behavior of system widgets via a user widget with the same bundle identifier (CFBundleIdentifier), a different vulnerability than CVE-2005-1474.

EPSS: 0.018 (76.7th percentile) — read the EPSS interpretation.

Affected products

References

  • cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cret@cert.org (Exploit, x_refsource_MISC, Vendor Advisory)