CVE-2005-2522

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-19 · updated 2026-06-16

Description

Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.

Affected products

macOS: 10.4, 10.4.1, 10.4.2
Apple Safari: all versions

References

http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
http://www.kb.cert.org/vuls/id/420316
http://www.us-cert.gov/cas/techalerts/TA05-229A.html
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
http://www.kb.cert.org/vuls/id/420316
http://www.us-cert.gov/cas/techalerts/TA05-229A.html

Get alerted when CVE-2005-2522 or the next vulnerability affects your stack