CVE-2010-0063

CVE-2010-0063 describes an incomplete blacklist vulnerability in Apple Mac OS X before version 10.6.3, affecting both client and server editions. This flaw allows user-assisted remote attackers to execute arbitrary JavaScript by tricking Safari into downloading a malicious file with a Content-Type not explicitly blacklisted, such as those associated with .ibplugin or .url extensions. The vulnerability has a CVSS score of 6.8, indicating a medium severity. It can be exploited remotely over a network (AV:N) with medium attack complexity (AC:M), requiring no authentication (Au:N). Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community attention, with no social media discussion or media coverage.