CVE-2004-0962: Apple Remote Desktop

High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching.

Affected products

• Apple Apple Remote Desktop: version 2.0.0 only

Published 2005-02-09. Last modified 2026-06-16.