Description
Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site.
References
- 36361 vdb-entry
- 57954 vdb-entry
- APPLE-SA-2009-09-10-2 vendor-advisory
- http://support.apple.com/kb/HT3865
- 36701 third-party-advisory