The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.
| Software | From | Fixed in |
|---|---|---|
| apple / mac_os_x | 10.2.8 | 10.2.8.x |
| apple / mac_os_x | 10.3.3 | 10.3.3.x |