Michael Lehn

**Name of the Vulnerable Software and Affected Versions** Safari on Apple Mac OS X (affected versions not specified) **Description** The issue allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a MACOSX folder that contains metadata (resource fork) which invokes the Terminal. This can automatically interpret a script using bash. An example of this exploit is demonstrated using a ZIP file that contains a script with a safe file extension. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.