Apple Mac OS X Launch Services Security Bypass Vulnerability

Bugtraq ID:	36360
Class:	Design Error
CVE:	CVE-2009-2811
Remote:	Yes
Local:	No
Published:	Sep 10 2009 12:00AM
Updated:	Sep 11 2009 04:32PM
Credit:	Apple
Vulnerable:	Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5
Not Vulnerable:

Apple Mac OS X Launch Services Security Bypass Vulnerability

Apple Mac OS X is prone to a vulnerability that may allow attackers to bypass certain security warnings. The issue affects the Launch Services component.

Successfully exploiting this issue may allow attackers to bypass certain security warnings and trick a user into opening unsafe malicious files.

The following versions are affected:

Mac OS X 10.5.8 and prior
Mac OS X Server 10.5.8 and prior

NOTE: This issue was previously covered in BID 36349 (Apple Mac OS X 2009-005 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Apple Mac OS X Launch Services Security Bypass Vulnerability

Attackers can use standard tools to exploit this issue.

Apple Mac OS X Launch Services Security Bypass Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Apple Mac OS X Server 10.5.8

• Apple SecUpdSrvr2009-005.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.8

• Apple SecUpd2009-005.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Launch Services Security Bypass Vulnerability

References:

• Mac OS X Homepage (Apple)