CVE-2009-1727: Medium severity Apple Mac OS X Server vulnerability
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1727?
CVE-2009-1727 has a moderate severity level due to the potential for user-assisted remote code execution via specially crafted web pages.
How do I fix CVE-2009-1727?
To fix CVE-2009-1727, update your Mac OS X to version 10.5.8 or later.
What versions of Mac OS X are affected by CVE-2009-1727?
CVE-2009-1727 affects Apple Mac OS X versions 10.5.0 through 10.5.7 including server variants.
What type of vulnerabilities does CVE-2009-1727 exploit?
CVE-2009-1727 exploits an incomplete blacklist vulnerability in handling Content-Type values in Safari.
Can CVE-2009-1727 be exploited without user interaction?
CVE-2009-1727 requires user interaction, as it necessitates the user to download content from a specially crafted web page.