CVE-2005-1331 json
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is d…
published 2005-05-04 21 y ago modified 2026-06-16 4 mo ago also EUVD-2005-1334
- cvss
- 5.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.3%
- EPSS 2.3% chance of exploitation in 30 days, percentile 83%
- public exploits
- 0
- none known
Summary
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.
Patch / fix
Exploit prediction
2.33% chance of exploitation in the next 30 days, higher than 83% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- remahl.se http://remahl.se/david/vuln/010/ referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P |
References
-
lists.apple.com
/archives/security-announce/2005/May/msg00001.html
vendor-advisory, patch
-
securityfocus.com
/bid/13480
vdb-entry, patch
-
secunia.com
/advisories/15227
third-party-advisory, patch
-
remahl.se
/david/vuln/010/
exploit
-
vupen.com
/english/advisories/2005/0455
vdb-entry
Sources
- CVE List CVE-2005-1331
- NVD CVE-2005-1331
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.