Description
Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands.
References
- VU#709220 third-party-advisory
- TA05-229A third-party-advisory
- APPLE-SA-2005-08-15 vendor-advisory
- APPLE-SA-2005-08-17 vendor-advisory