CVE-2009-2811

published 2009-09-14

CVE-2009-2811: Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc…

medium 6.8 CVSS 3.1

AV N AC M Au N C P I P A P

Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x	—	—
apple	mac_os_x_server	—	—

CWE-94