PT-2008-1704

CVE-2008-0042

·

Published

2008-02-12

·

Updated

2011-03-08

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Terminal.app in Mac OS X versions 10.4.11 and 10.5 through 10.5.1
Description The issue allows remote attackers to execute arbitrary code via unspecified URL schemes in Terminal.app.
Recommendations For Mac OS X version 10.4.11, update to a version that is not affected by this issue. For Mac OS X versions 10.5 through 10.5.1, update to a version that is not affected by this issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2008-0042
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com