2.1
CVSSv2

CVE-2005-2748

Published: 25/10/2005 Updated: 05/09/2008
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file before running a setuid application.

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x 10.3.9

apple mac os x server 10.3.9

apple mac os x 10.4.2

apple mac os x server 10.4.2