PT-2006-2455 · Apple · Safari+1

Publicado 2006-05-12 · Atualizado 2017-07-20 · CVE-2006-1447

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.4.6

Description The issue allows remote attackers to cause Safari to launch unsafe content via long file name extensions. This occurs because the long file name extensions prevent Download Validation from determining which application will be used to open the file.

Recommendations For Apple Mac OS X version 10.4.6, consider restricting the handling of long file name extensions to prevent Safari from launching unsafe content until a fix is available.

Correção

Identificadores relacionados

CVE-2006-1447

Produtos afetados

Macos X

Safari

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-1447 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Correção, Aviso do Fabricante
• http://securityfocus.com/bid/17951 · Nota
• http://us-cert.gov/cas/techalerts/TA06-132A.html · Nota
• http://secunia.com/advisories/20077 · Nota
• http://securitytracker.com/id?1016081 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26416 · Nota
• http://osvdb.org/25591 · Nota
• http://vupen.com/english/advisories/2006/1779 · Nota