PT-2007-6817 · Apple · Quicklook+1

Publicado 2007-12-19 · Atualizado 2017-07-29 · CVE-2007-5857

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.1

Description The issue concerns a problem where Quick Look in Apple Mac OS X does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created. This could potentially allow remote attackers to obtain sensitive information via HREFTrack.

Recommendations For Apple Mac OS X version 10.5.1, consider avoiding the use of Quick Look for movie files until a fix is available. As a temporary workaround, restrict access to sensitive information when previewing movie files or creating icons.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5857

Produtos afetados

Macos X

Quicklook

Referências · 9

• http://docs.info.apple.com/article.html?artnum=307179 · Nota
• http://vupen.com/english/advisories/2007/4238 · Nota
• http://secunia.com/advisories/28136 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5857 · Nota de Segurança
• http://securitytracker.com/id?1019106 · Nota
• http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html · Aviso do Fabricante
• http://securityfocus.com/bid/26910 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39106 · Nota
• http://us-cert.gov/cas/techalerts/TA07-352A.html · Nota