CVE-2010-0063

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari, as demonstrated by the values for the (1) .ibplugin and (2) .url extensions.

• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT4077Patch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT4077Patch, Vendor Advisory

Published

Mar 30, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0057AFP Server in Apple Mac OS X before 10.6.3 does not prevent …
• CVE-2010-0058freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security U…
• CVE-2010-0059CoreAudio in Apple Mac OS X before 10.6.3 allows remote atta…
• CVE-2010-0060CoreAudio in Apple Mac OS X before 10.6.3 allows remote atta…
• CVE-2010-0061Rejected reason: This candidate is unused by its CNA.
• CVE-2010-0062Heap-based buffer overflow in quicktime.qts in CoreMedia and…
• CVE-2010-0064DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserv…
• CVE-2010-0065Disk Images in Apple Mac OS X before 10.6.3 allows user-assi…
• CVE-2010-0066Unspecified vulnerability in the Access Manager Identity Ser…
• CVE-2010-0067Unspecified vulnerability in the Oracle Containers for J2EE …
• CVE-2010-0068Unspecified vulnerability in the WebLogic Server component i…
• CVE-2010-0069Unspecified vulnerability in the WebLogic Server component i…