OSVDB ID: 35147

Title: Apple Mac OS X Alias Manager Duplicate File Name Display Weakness

Info

Disclosure

May 25, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Mac OS X contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered when identical disk images contain files with identical names, and only one name appears. It is possible that the flaw may allow arbitrary code execution by misleading a user about the nature of a file resulting in a loss of integrity.

Classification

Location: Local Access Required
Attack Type: Other
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability.

Products

Apple Computer, Inc.

Mac OS X

10.3.x
10.4
10.4.1
10.4.2
10.4.3
10.4.4
10.4.5
10.4.6
10.4.7
10.4.8
10.4.9

References

Credit

  • Greg Bolsinga -


Direct URL: http://osvdb.org/35147