Security Advisory

CVE-2014-8839

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-01-30 11:00:00

Last updated 2024-08-06 13:26:02

Assigner apple

State PUBLISHED

Description

Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages" configuration, which allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this images URL.

← Browse all CVEs View on cve.org ↗