OSVDB ID: 15637

Title: Apple Mac OS X AppleWebKit Local Domain JavaScript Execution

Info

Disclosure
Apr 12, 2005

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 Mac OS X contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to XMLHttpRequest granting read access to any file on the system with a known path that the user has access to. This may allow an attacker to place an HTML file on the user's system, which can then be accessed to execute arbitrary code.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Rumored
Disclosure: OSVDB Verified

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Products

Apple Computer, Inc.

Mac OS X

 10.3
10.3.1
10.3.2
10.3.3
10.3.4
10.3.5
10.3.6
10.3.7
10.3.8

Omni Group

OmniWeb

 5.1

Shiira Project

Shiira

 0.93

References

Credit
  • David Remahl - davidremahl.se -


Direct URL: http://osvdb.org/15637