CVE-2012-3719

macOS < 10.7.5 - Remote Code Execution via Embedded Web Plugins in Mail

Title source: llm

Description

Mail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows remote attackers to execute arbitrary plugin code via an e-mail message that triggers the loading of a third-party plugin.

References (3)

Core 3

Core References

Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT5501

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/78751

Scores

EPSS 0.0190

EPSS Percentile 77.2%

Details

CWE

CWE-20

Status published

Products (50)

apple/mac_os_x 10.0

apple/mac_os_x 10.0.0

apple/mac_os_x 10.0.1

apple/mac_os_x 10.0.2

apple/mac_os_x 10.0.3

apple/mac_os_x 10.0.4

apple/mac_os_x 10.1

apple/mac_os_x 10.1.0

apple/mac_os_x 10.1.1

apple/mac_os_x 10.1.2

... and 40 more

Published Sep 20, 2012

Tracked Since Feb 18, 2026