← Database

CVE-2007-5854

MEDIUM CVSS: 4.3 Published: 2007-12-19 Modified: 2026-06-16

Description

Launch Services in Apple Mac OS X 10.4.11 and 10.5.1 does not treat HTML files as unsafe content, which allows attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via a crafted HTML file.

Affected Platforms

Apple Mac Os X

Weakness Type

CWE-79

References