CVE-2009-0943

CVE-2009-0943 affects Apple Mac OS X Help Viewer: on Mac OS X 10.4.11 and 10.5 up to 10.5.6, full HTML paths loaded from help: URLs are not validated against registered help books, enabling a malicious help: URL to invoke arbitrary AppleScript and execute code. The issue is addressed in Security ...