PT-2006-2455 · Apple · Safari+1

Published 2006-05-12 · Updated 2017-07-20 · CVE-2006-1447

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.4.6

Description The issue allows remote attackers to cause Safari to launch unsafe content via long file name extensions. This occurs because the long file name extensions prevent Download Validation from determining which application will be used to open the file.

Recommendations For Apple Mac OS X version 10.4.6, consider restricting the handling of long file name extensions to prevent Safari from launching unsafe content until a fix is available.

Fix

Related Identifiers

CVE-2006-1447

Affected Products

Macos X

Safari

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-1447 · Security Note
• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Patch, Vendor Advisory
• http://securityfocus.com/bid/17951 · Note
• http://us-cert.gov/cas/techalerts/TA06-132A.html · Note
• http://secunia.com/advisories/20077 · Note
• http://securitytracker.com/id?1016081 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26416 · Note
• http://osvdb.org/25591 · Note
• http://vupen.com/english/advisories/2006/1779 · Note