CVE

Id
38377  
CVE No.
CVE-2009-0942  
Status
Candidate  
Description
Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
418690 38377 CVE-2009-0942 CONFIRM:http://support.apple.com/kb/HT3549  View
418691 38377 CVE-2009-0942 APPLE:APPLE-SA-2009-05-12  View
418692 38377 CVE-2009-0942 URL:http://lists.apple.com/archives/security-announce/2009/May/msg00002.html  View
418693 38377 CVE-2009-0942 CERT:TA09-133A  View
418694 38377 CVE-2009-0942 URL:http://www.us-cert.gov/cas/techalerts/TA09-133A.html  View
418695 38377 CVE-2009-0942 BID:34926  View
418696 38377 CVE-2009-0942 URL:http://www.securityfocus.com/bid/34926  View
418697 38377 CVE-2009-0942 SECTRACK:1022216  View
418698 38377 CVE-2009-0942 URL:http://www.securitytracker.com/id?1022216  View
418699 38377 CVE-2009-0942 SECUNIA:35074  View
418700 38377 CVE-2009-0942 URL:http://secunia.com/advisories/35074  View
418701 38377 CVE-2009-0942 VUPEN:ADV-2009-1297  View
418702 38377 CVE-2009-0942 URL:http://www.vupen.com/english/advisories/2009/1297  View
418703 38377 CVE-2009-0942 XF:macos-helpviewer-css-code-execution(50485)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40331 JVNDB-2009-001337 FreeType における入力処理に関する整数オーバーフローの脆弱性 FreeType には、特定の入力処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-0946 38377 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001337.html  View