Unscored CVE-2015-3716 EUVD-2015-3752GHSA-mqhx-h3p8-rxmj

Spotlight in Apple OS X before 10.10.4 allows attackers to execute arbitrary commands via a crafted name of a photo file within the local p…

Published Jul 3, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

Spotlight in Apple OS X before 10.10.4 allows attackers to execute arbitrary commands via a crafted name of a photo file within the local photo library.

References

APPLE-SA-2015-06-30-2 vendor-advisory
75493 vdb-entry
1032760 vdb-entry
http://support.apple.com/kb/HT204942