CVEvulnerability
CVE-2005-1723
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-06-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
LaunchServices in Apple Mac OS X 10.4.x up to 10.4.1 does not properly mark file extensions and MIME types as unsafe if an Apple Uniform Type Identifier (UTI) is not created when the type is added to the database of unsafe types, which could allow attackers to bypass intended restrictions.
Affected configurations
• apple mac os x server 10.4
• apple mac os x server 10.4.1
References
- http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html Patch, Vendor Advisory
- http://securitytracker.com/id?1014141 securitytracker.com
- http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html Patch, Vendor Advisory
- http://securitytracker.com/id?1014141 securitytracker.com