CVE-2005-1342

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-04 · updated 2026-06-16

Description

The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.

Affected products

macOS: 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5 (+4)
Apple Terminal: 1.4.4

References

http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
http://remahl.se/david/vuln/011/
http://secunia.com/advisories/15227
http://www.kb.cert.org/vuls/id/356070
http://www.osvdb.org/16084
http://www.securityfocus.com/bid/13480
http://www.us-cert.gov/cas/techalerts/TA05-136A.html
http://www.vupen.com/english/advisories/2005/0455
http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
http://remahl.se/david/vuln/011/
http://secunia.com/advisories/15227
http://www.kb.cert.org/vuls/id/356070

Get alerted when CVE-2005-1342 or the next vulnerability affects your stack