CVE-2015-3762 in Mac OS X
Summary
The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
05/07/2015
Disclosure
08/16/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 77245 | Apple Mac OS X Text Formats User information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2015-3762 |