CVE-2005-2752

Published: Nov 1, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers to obtain sensitive information, a different vulnerability than CVE-2005-1126 and CVE-2005-1406.

Affected (2)

Products: Apple: Mac Os X, Mac Os X Server

Apple

2 products

Mac Os X

Mac Os X Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.4.2
Apple Mac Os X Server	Up to 10.4.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html

Source: cve@mitre.org

Patch

http://secunia.com/advisories/17368

Source: cve@mitre.org

http://securitytracker.com/id?1015127

Source: cve@mitre.org

http://www.osvdb.org/20431

Source: cve@mitre.org

http://www.securityfocus.com/bid/15252

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2005/2256

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html