Help Viewer in Apple Mac OS X 10.4.11 and 10.5 prior to 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote malicious users to execute arbitrary code via a help: URL that triggers invocation of AppleScript files.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apple mac os x 10.5.5 |
||
apple mac os x 10.5.6 |
||
apple mac os x server 10.5.4 |
||
apple mac os x server 10.4.11 |
||
apple mac os x 10.5.1 |
||
apple mac os x 10.5.3 |
||
apple mac os x 10.5.4 |
||
apple mac os x server 10.5.1 |
||
apple mac os x server 10.5.3 |
||
apple mac os x server 10.5.2 |
||
apple mac os x server 10.5.6 |
||
apple mac os x server 10.5.0 |
||
apple mac os x 10.5.0 |
||
apple mac os x 10.4.11 |
||
apple mac os x 10.5.2 |
||
apple mac os x server 10.5.5 |
Vulmon