OSVDB ID: 25592

Title: Apple Mac OS X Internet Location Spoofing Arbitrary Code Execution

Info

Disclosure
May 08, 2006

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 Mac OS X contains a flaw that may allow a malicious user to spoof the true nature of an Internet Location item. The issue is triggered when an Internet Location file contains a different type of URL than the Internet Location type. It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

 Install Apple Security Update 2006-003, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Apple Computer, Inc.

Mac OS X

 10.3.x
10.4
10.4.1
10.4.2
10.4.3
10.4.4
10.4.5
10.4.6

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/25592