CVE-2008-2309

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a (1) .xht…

published July 1, 2008

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a (1) .xht or (2) .xhtm file, which does not trigger a "potentially unsafe" warning message in (a) the Download Validation feature in Mac OS X 10.4 or (b) the Quarantine feature in Mac OS X 10.5.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02554 · 84.9th percentile
Published
2008-07-01T18:00Z
EPSS history
Timeline
  • 01 JUL 18:00Z
    Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers to execute arbitrary code via a (1) .xht…
    cvelistv5