CVE-2010-0063: Medium severity Apple iOS and macOS vulnerability
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari, as demonstrated by the values for the (1) .ibplugin and (2) .url extensions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0063?
CVE-2010-0063 has been classified with a moderate severity level due to its potential to allow remote attackers to execute arbitrary JavaScript.
How do I fix CVE-2010-0063?
To fix CVE-2010-0063, update your Apple Mac OS X to version 10.6.3 or later, where the vulnerability has been addressed.
What are the affected versions for CVE-2010-0063?
CVE-2010-0063 affects multiple versions of Apple Mac OS X, including 10.5.0 through 10.6.2.
How does CVE-2010-0063 exploit work?
CVE-2010-0063 exploits an incomplete blacklist vulnerability that enables user-assisted remote execution of arbitrary JavaScript through specific Content-Type values.
Is there a workaround for CVE-2010-0063?
There are no known effective workarounds for CVE-2010-0063, and the recommended action is to apply the necessary updates.