CVE-2009-2811

Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature.

Affected products

Macos X

Apple Mac Os X

= 10.5.8

Apple Mac Os X Server

= 10.5.8

CVSS 2.0

6.8 MEDIUM

EPSS

3.2% (87th percentile)

Weakness

CWE-94

NVD status

Modified

Published

2009-09-14