CVE-2010-1805
apple safari: no CVSS score yet. EPSS 0.3% chance of exploitation in the next 30 days.
Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe (aka Windows Explorer) program in a directory containing a file that had been downloaded by Safari.
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:safari
References
- http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html
- http://support.apple.com/kb/HT4333
- http://www.securityfocus.com/bid/43048
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11956
- http://lists.apple.com/archives/security-announce/2010//Sep/msg00001.html