CVE-2010-0497: Medium severity Apple iOS and macOS vulnerability
Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it easier for user-assisted remote attackers to execute arbitrary code via a package file type.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0497?
CVE-2010-0497 is considered a moderate severity vulnerability because it allows attackers to execute arbitrary code upon user assistance.
How do I fix CVE-2010-0497?
To fix CVE-2010-0497, users should upgrade their Apple Mac OS X to version 10.6.3 or later.
Which versions of Mac OS X are affected by CVE-2010-0497?
CVE-2010-0497 affects Apple Mac OS X versions prior to 10.6.3, including several 10.5.x releases.
What type of attack is possible using CVE-2010-0497?
CVE-2010-0497 enables user-assisted remote attackers to execute arbitrary code via malicious package file types.
Is there a workaround for CVE-2010-0497?
The best workaround for CVE-2010-0497 is to avoid opening internet-enabled disk images from untrusted sources.