CVE-2008-3638

Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbitrary programs.

Link	Resource
http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
http://secunia.com/advisories/32018	Vendor Advisory
http://support.apple.com/kb/HT3179
http://www.securityfocus.com/bid/31380
http://www.securitytracker.com/id?1020944
https://exchange.xforce.ibmcloud.com/vulnerabilities/45397

Configuration 1

cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:* cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*

---

Published : 2008-09-26 04:21

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-3638

Mitre link : CVE-2008-3638

No products.

CWE-94