medium6.8
CVE-2010-0063
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScr…
Impact
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari, as demonstrated by the values for the (1) .ibplugin and (2) .url extensions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.6.2 Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3 |
| Apple | Mac Os X Server | through 10.6.2 Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3 |