Vulnerabilities > Apple > Applescript

DATE CVE VULNERABILITY TITLE RISK
2011-03-23 CVE-2011-0173 USE of Externally-Controlled Format String vulnerability in Apple Applescript, mac OS X and mac OS X Server
Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (2) display alert command in a dialog in an AppleScript Studio application.
network
apple CWE-134
6.8
2005-05-04 CVE-2005-1331 Multiple vulnerability in Apple Mac OS X
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could allow remote attackers to trick users into executing malicious code via certain URI characters such as NULL, control characters, and homographs.
network
high complexity
apple
5.1