PT-2004-1648 · Apple · Safari

Publicado 2004-06-11 · Atualizado 2017-10-12 · CVE-2004-0539

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Safari versions 10.2.8 through 10.3.4

Description The issue allows remote attackers to execute arbitrary code by exploiting the "Show in Finder" button in the Safari web browser. This could lead to the execution of downloaded applications.

Recommendations For versions 10.2.8 through 10.3.4, consider disabling the "Show in Finder" button functionality until a patch is available. Restrict access to downloaded applications to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-0539

Produtos afetados

Safari

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2004-0539 · Nota de Segurança
• http://docs.info.apple.com/article.html?artnum=25785 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/773190 · Nota