critical9.3
CVE-2008-3638
Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbitrary programs.
Impact
Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbitrary programs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | Versions 10.5.4, 10.5.5 |
| Apple | Mac Os X Server | Versions 10.5.4, 10.5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
- http://secunia.com/advisories/32018
- http://support.apple.com/kb/HT3179
- http://www.securityfocus.com/bid/31380
- http://www.securitytracker.com/id?1020944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45397
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
- http://secunia.com/advisories/32018
- http://support.apple.com/kb/HT3179
- http://www.securityfocus.com/bid/31380
- http://www.securitytracker.com/id?1020944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45397