NetSight
IP …
critical9.3

CVE-2008-4234

Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute…

Impact

Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers to execute arbitrary code via an executable file with the content type indicating no application association for the file, which does not trigger a "potentially unsafe" warning message.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.5.5
Versions 10.5, 10.5.1, 10.5.2, 10.5.3, 10.5.4
AppleMac Os X Server
through 10.5.5
Versions 10.5, 10.5.1, 10.5.2, 10.5.3, 10.5.4

Weakness classification

CWE-264

References