CVE-2010-1374: Path Traversal
Published Jun 17, 2010
·Updated
Directory traversal vulnerability in iChat in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, when AIM is used, allows remote attackers to create arbitrary files via directory traversal sequences in an inline image-transfer operation.
Affected Software
32 affected components
Apple iOS and macOS=10.5.8
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.6.1
Apple iOS and macOS=10.6.2
Apple iOS and macOS=10.6.3
Apple Mac OS X Server=10.5.8
Apple Mac OS X Server=10.6.0
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.2
Apple Mac OS X Server=10.6.3
AOL AIM=1.0
AOL AIM=1.06
AOL AIM=1.7
AOL AIM=2.0
AOL AIM=2.1
AOL AIM=3.0
AOL AIM=3.5
AOL AIM=4.1
AOL AIM=4.2
AOL AIM=4.3
AOL AIM=4.4
AOL AIM=4.7
AOL AIM=4.8
AOL AIM=5.0
AOL AIM=5.1
AOL AIM=5.2
AOL AIM=5.5
AOL AIM=5.9
AOL AIM=6.0
AOL AIM=6.2
AOL AIM=6.5
AOL AIM=6.8
Remediation
Patch Available
Patch Available
Event History
Jun 17, 2010
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
04:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1374?
CVE-2010-1374 is classified as a medium severity vulnerability.
2
How do I fix CVE-2010-1374?
To fix CVE-2010-1374, you should update to Apple Mac OS X 10.6.4 or later.
3
What software is affected by CVE-2010-1374?
CVE-2010-1374 affects Apple Mac OS X versions 10.5.8 and 10.6.0 to 10.6.3 using iChat with AIM.
4
What type of vulnerability is CVE-2010-1374?
CVE-2010-1374 is a directory traversal vulnerability.
5
Can CVE-2010-1374 be exploited remotely?
Yes, CVE-2010-1374 can be exploited remotely to create arbitrary files.