Unscored severity · published May 4, 2005
CVE-2005-1331
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would…
–
CVSS
2.3%
EPSS
No
On KEV
Description
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Applescript · Apple
2.0.0 · source: NVD
MO
Mac OS X · Apple
10.3; 10.3.1; 10.3.2; 10.3.3; 10.3.4; 10.3.5; +4 more · source: NVD
MO
Mac OS X Server · Apple
10.3; 10.3.1; 10.3.2; 10.3.3; 10.3.4; 10.3.5; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1331
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1331
Patch
http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
Exploit
http://remahl.se/david/vuln/010/
Patch
http://secunia.com/advisories/15227
Patch
http://www.securityfocus.com/bid/13480
www.vupen.com
http://www.vupen.com/english/advisories/2005/0455
More from Applescript
–
CVE-2011-0173
Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service…