VULNERABILITY INTELLIGENCE
CVE-2010-0545
CVSS score4.4 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2010-06-17
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.
Primary references
- product-security@apple.com — Vendor Advisory
- product-security@apple.com — Vendor Advisory
- product-security@apple.com
- product-security@apple.com — Patch, Vendor Advisory
- product-security@apple.com — Patch
- product-security@apple.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory