NetSight
low2.6

CVE-2010-0537

DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which …

Impact

DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted remote attackers to trigger unintended remote file copying via a crafted share name.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.6.0, 10.6.1, 10.6.2
AppleMac Os X Server
Versions 10.6.0, 10.6.1, 10.6.2

Weakness classification

References