Description
Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature.
References
- APPLE-SA-2009-09-10-2 vendor-advisory
- 57953 vdb-entry
- http://support.apple.com/kb/HT3865
- 36701 third-party-advisory
- 36360 vdb-entry
- macosx-launchservices-code-execution(53171) vdb-entry