The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a file that triggers memory corruption.
2009-05-13T15:30:00.577
2025-04-09T00:30:58.490
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | apple | mac_os_x | 10.4.11 | Yes |
Operating System | apple | mac_os_x | 10.5.0 | Yes |
Operating System | apple | mac_os_x | 10.5.1 | Yes |
Operating System | apple | mac_os_x | 10.5.2 | Yes |
Operating System | apple | mac_os_x | 10.5.3 | Yes |
Operating System | apple | mac_os_x | 10.5.4 | Yes |
Operating System | apple | mac_os_x | 10.5.5 | Yes |
Operating System | apple | mac_os_x | 10.5.6 | Yes |
Operating System | apple | mac_os_x_server | 10.4.11 | Yes |
Operating System | apple | mac_os_x_server | 10.5.0 | Yes |
Operating System | apple | mac_os_x_server | 10.5.1 | Yes |
Operating System | apple | mac_os_x_server | 10.5.2 | Yes |
Operating System | apple | mac_os_x_server | 10.5.3 | Yes |
Operating System | apple | mac_os_x_server | 10.5.4 | Yes |
Operating System | apple | mac_os_x_server | 10.5.5 | Yes |
Operating System | apple | mac_os_x_server | 10.5.6 | Yes |