CVE

Id
8914  
CVE No.
CVE-2004-0486  
Status
Candidate  
Description
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.  
Phase
Assigned (20040520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56956 8914 CVE-2004-0486 MISC:http://www.fundisom.com/owned/warning  View
56957 8914 CVE-2004-0486 FULLDISC:20040516 Vuln. MacOSX/Safari: Remote help-call, execute scripts  View
56958 8914 CVE-2004-0486 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html  View
56959 8914 CVE-2004-0486 SECUNIA:11622  View
56960 8914 CVE-2004-0486 URL:http://secunia.com/advisories/11622/  View
56961 8914 CVE-2004-0486 APPLE:APPLE-SA-2004-05-21  View
56962 8914 CVE-2004-0486 URL:http://lists.apple.com/mhonarc/security-announce/msg00053.html  View
56963 8914 CVE-2004-0486 CERT-VN:VU#578798  View
56964 8914 CVE-2004-0486 URL:http://www.kb.cert.org/vuls/id/578798  View
56965 8914 CVE-2004-0486 BID:10356  View
56966 8914 CVE-2004-0486 URL:http://www.securityfocus.com/bid/10356  View
56967 8914 CVE-2004-0486 OSVDB:6184  View
56968 8914 CVE-2004-0486 URL:http://www.osvdb.org/6184  View
56969 8914 CVE-2004-0486 SECTRACK:1010167  View
56970 8914 CVE-2004-0486 URL:http://securitytracker.com/id?1010167  View
56971 8914 CVE-2004-0486 XF:macos-runscript-code-execution(16166)  View

Related JVN