CVE-2009-2812

Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site.

Affected products

Macos X

Apple Mac Os X

= 10.5.8

Apple Mac Os X Server

= 10.5.8

CVSS 2.0

6.8 MEDIUM

EPSS

2.2% (81th percentile)

NVD status

Modified

Published

2009-09-14