CVE-2007-6165

EPSS 44.7%

Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment containing an apparently-safe file type and script in a resource fork, which does not warn the user that a separate program is going to be executed. NOTE: this is a regression error related to CVE-2006-0395.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/16870unverified exploitdbwww.exploit-db.com/exploits/30781unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://docs.info.apple.com/article.html?artnum=307179 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html http://secunia.com/advisories/27785 http://secunia.com/advisories/28136 http://securitytracker.com/id?1019106 http://www.heise-security.co.uk/news/99257 http://www.kb.cert.org/vuls/id/433819 http://www.securityfocus.com/bid/26510 http://www.us-cert.gov/cas/techalerts/TA07-352A.html http://www.vupen.com/english/advisories/2007/3958 http://www.vupen.com/english/advisories/2007/4238