PT-2005-4458 · Apple · Safari

Publicado 2005-12-01 · Atualizado 2011-03-08 · CVE-2005-3702

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Safari versions 10.3.9 through 10.4.3

Description The issue allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name.

Recommendations For versions 10.3.9 through 10.4.3, update to a newer version to mitigate the risk.

Correção

Identificadores relacionados

CVE-2005-3702

Produtos afetados

Safari

Referências · 6

• http://vupen.com/english/advisories/2005/2659 · Nota
• http://securitytracker.com/id?1015294 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3702 · Nota de Segurança
• http://docs.info.apple.com/article.html?artnum=302847 · Aviso do Fabricante
• http://secunia.com/advisories/17813 · Aviso do Fabricante
• http://securityfocus.com/bid/15647 · Correção