CVE-2009-0942

Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets CSS are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...

CVE-2009-0942

CVE-2009-0942 affects Apple Mac OS X 10.4.11 and 10.5 prior to 10.5.7 where Help Viewer loads CSS references from URLs without verifying they reside in a registered help book. This can allow a remote attacker to craft a malicious help: URL that triggers AppleScript execution and arbitrary code ex...