CVE-2015-3762

CVE-2015-3762 affects Apple OS X Text Formats/TextEdit prior to 10.10.5. The issue is an XXE in XML parsing that can allow a remote attacker to read arbitrary files via a text file containing an XML external entity declaration with an entity reference. Root cause: XML External Entity handling in ...