PT-2007-6817 · Apple · Quicklook+1

Published 2007-12-19 · Updated 2017-07-29 · CVE-2007-5857

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.5.1

Description The issue concerns a problem where Quick Look in Apple Mac OS X does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created. This could potentially allow remote attackers to obtain sensitive information via HREFTrack.

Recommendations For Apple Mac OS X version 10.5.1, consider avoiding the use of Quick Look for movie files until a fix is available. As a temporary workaround, restrict access to sensitive information when previewing movie files or creating icons.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5857

Affected Products

Macos X

Quicklook

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-5857 · Security Note
• http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html · Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=307179 · Note
• http://vupen.com/english/advisories/2007/4238 · Note
• http://secunia.com/advisories/28136 · Note
• http://securitytracker.com/id?1019106 · Note
• http://securityfocus.com/bid/26910 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39106 · Note
• http://us-cert.gov/cas/techalerts/TA07-352A.html · Note