Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2009-2810

Overview

Vulnerability Score 6.8 6.8
CVE Id CVE-2009-2810
Last Modified 17 Nov 2009 02:02:57
Published 10 Nov 2009 02:30:01
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2009-2810

Summary

Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message.

Vulnerable Systems

Operating System

  • Apple Mac Os X 10.6

  • Apple Mac Os X 10.6.1

  • Apple Mac Os X Server 10.6

  • Apple Mac Os X Server 10.6.1


References

BID - 36956

CONFIRM - http://support.apple.com/kb/HT3937

VUPEN - ADV-2009-3184

APPLE - APPLE-SA-2009-11-09-1

Related Patches

Apple 2009-11-09 Mac OS X v10.6.2 Update


Last Updated: 27 May 2016 10:51:02