NetSight
medium6.8

CVE-2010-0497

Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it eas…

Impact

Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it easier for user-assisted remote attackers to execute arbitrary code via a package file type.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.6.2
Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3
AppleMac Os X Server
through 10.6.2
Versions 10.5, 10.5.0, 10.5.1, 10.5.2, 10.5.3

References