CVE-2019-17051

Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a…

published September 30, 2019

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01600 · 75.6th percentile
Published
2019-09-30T19:05Z
EPSS history
Timeline
  • 30 SEP 19:05Z
    Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a…
    cvelistv5