CVE-2014-8839 in Apple Mac OS X

Summary

Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages" configuration, which allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this image's URL.

Reservation

11/14/2014

Disclosure

01/30/2015

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
68913	Apple Mac OS X Spotlight information disclosure	200	Unproven	Official fix	CVE-2014-8839
68576	Apple Mac OS X Spotlight information disclosure	200	Proof-of-Concept	Workaround	CVE-2014-8839