CVE-2009-2812: Apple Mac OS X

Medium severity, CVSS 6.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier (UTI) in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site.

Affected products

  • Apple Mac OS X: version 10.5.8 only
  • Apple Mac OS X Server: version 10.5.8 only

Published 2009-09-14. Last modified 2026-06-16.