CVE-2009-2831: Apple Mac OS X

Medium severity, CVSS 5.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a "design issue."

Affected products

  • Apple Mac OS X: version 10.5.8 only
  • Apple Mac OS X Server: version 10.5.8 only

Published 2009-11-10. Last modified 2026-06-16.