{"id":43058,"date":"2021-09-22T23:07:12","date_gmt":"2021-09-22T23:07:12","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/apple-tried-to-patch-this-security-hole-in-macos-finder-but-didnt-consider-upper-and-lowercase-characters\/"},"modified":"2021-09-22T23:07:12","modified_gmt":"2021-09-22T23:07:12","slug":"apple-tried-to-patch-this-security-hole-in-macos-finder-but-didnt-consider-upper-and-lowercase-characters","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/apple-tried-to-patch-this-security-hole-in-macos-finder-but-didnt-consider-upper-and-lowercase-characters\/","title":{"rendered":"Apple tried to patch this security hole in macOS Finder but didn’t consider upper and lowercase characters"},"content":{"rendered":"

Apple’s macOS Finder application is currently vulnerable to a remote code execution bug, despite an apparent attempt to fix the problem.<\/p>\n

A security advisory<\/a> published Tuesday by the SSD Secure Disclosure program, on behalf of researcher Park Minchan, explains that macOS Finder \u2013 which provides a visual interface for interacting with files \u2013 is vulnerable to documents with the .inetloc<\/code> extension.<\/p>\n

“[T]hese files can be embedded inside emails which if the user clicks on them will execute the commands embedded inside them without providing a prompt or warning to the user,” the advisory says.<\/p>\n