CVE-2005-2744

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-25 · updated 2026-06-16

Description

Buffer overflow in QuickDraw Manager for Apple OS X 10.3.9 and 10.4.2, as used by applications such as Safari, Mail, and Finder, allows remote attackers to execute arbitrary code via a crafted PICT file.

Affected products

macOS: 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5 (+7)
Apple Mac Os X Server: 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5 (+7)

References

http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
http://secunia.com/advisories/16920/
http://securitytracker.com/alerts/2005/Sep/1014961.html
http://www.auscert.org.au/5509
http://www.ciac.org/ciac/bulletins/p-312.shtml
http://www.kb.cert.org/vuls/id/529945
http://www.securityfocus.com/bid/14914
https://exchange.xforce.ibmcloud.com/vulnerabilities/22384
http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
http://secunia.com/advisories/16920/
http://securitytracker.com/alerts/2005/Sep/1014961.html
http://www.auscert.org.au/5509

Get alerted when CVE-2005-2744 or the next vulnerability affects your stack