Apple Mac OS X LaunchServices CVE-2013-5178 Remote Security Vulnerability

Bugtraq ID:	63343
Class:	Input Validation Error
CVE:	CVE-2013-5178
Remote:	Yes
Local:	No
Published:	Oct 22 2013 12:00AM
Updated:	Feb 26 2014 12:31AM
Credit:	Jesse Ruderman of Mozilla Corporation, Stephane Sudre of Intego.
Vulnerable:
Not Vulnerable:

Apple Mac OS X LaunchServices CVE-2013-5178 Remote Security Vulnerability

Apple Mac OS X is prone to a remote security vulnerability.

Attackers can exploit this issue to manipulate file names and execute arbitrary files in the context of the affected application.

Note: This issue was previously covered in BID 63282 (Apple Mac OS X APPLE-SA-2013-10-22-3 Multiple Security Vulnerabilities), but has been given its own record to better document it.

These issues affect OS X versions prior to 10.9.

Apple Mac OS X LaunchServices CVE-2013-5178 Remote Security Vulnerability

An attacker can exploit this issue using readily available tools.

Apple Mac OS X LaunchServices CVE-2013-5178 Remote Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X LaunchServices CVE-2013-5178 Remote Security Vulnerability

References:

• Apple Homepage (Apple)
  
• Mac OS X Homepage (Apple)