PT-2005-4458 · Apple · Safari

Published 2005-12-01 · Updated 2011-03-08 · CVE-2005-3702

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Safari versions 10.3.9 through 10.4.3

Description The issue allows remote attackers to cause files to be downloaded to locations outside the download directory via a long file name.

Recommendations For versions 10.3.9 through 10.4.3, update to a newer version to mitigate the risk.

Fix

Related Identifiers

CVE-2005-3702

Affected Products

Safari

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-3702 · Security Note
• http://docs.info.apple.com/article.html?artnum=302847 · Vendor Advisory
• http://secunia.com/advisories/17813 · Vendor Advisory
• http://securityfocus.com/bid/15647 · Patch
• http://vupen.com/english/advisories/2005/2659 · Note
• http://securitytracker.com/id?1015294 · Note