CVE-2009-2811: Apple Mac OS X
Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days.
Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature.
Affected products
Published 2009-09-14. Last modified 2026-06-16.