PT-2010-1881 · Apple · Macos X+1
Published
2010-03-30
·
Updated
2010-03-31
·
CVE-2010-0056
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
AppKit in Apple Mac OS X version 10.5.8
Description
The issue allows user-assisted remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted document. This is due to a buffer overflow in the Cocoa spell checking component of AppKit.
Recommendations
For AppKit in Apple Mac OS X version 10.5.8, consider avoiding the use of crafted documents until a fix is available. As a temporary workaround, restrict the opening of documents from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Appkit
Macos X