CVE-2011-0178

No fix known EPSS <1%

The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.

Published 2011-03-23 · CVE record · OSV

Products: apple mac_os_x, apple carboncore, apple mac_os_x_server