CVE-2009-1727

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary…

published August 6, 2009

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02675 · 85.7th percentile
Published
2009-08-06T16:00Z
EPSS history
Timeline
  • 06 AUG 16:00Z
    Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary…
    cvelistv5