NVD

Id
59578  
Name
CVE-2006-0848  
Description
The "Open "safe" files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-02-22  
Modified Date
2013-08-18  
Seq
2006-0848  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
306422 59578 CVE-2006-0848 http://docs.info.apple.com/article.html?artnum=303382  View
306423 59578 CVE-2006-0848 1015652  View
306424 59578 CVE-2006-0848 http://www.frsirt.com/exploits/20060222.safari_safefiles_exec.pm.php  View
306425 59578 CVE-2006-0848 http://www.heise.de/english/newsticker/news/69862  View
306426 59578 CVE-2006-0848 VU#999708  View
306427 59578 CVE-2006-0848 http://www.mathematik.uni-ulm.de/numerik/staff/lehn/macosx.html  View
306428 59578 CVE-2006-0848 16736  View
306429 59578 CVE-2006-0848 TA06-053A  View
306430 59578 CVE-2006-0848 TA06-062A  View
306431 59578 CVE-2006-0848 ADV-2006-0671  View
306432 59578 CVE-2006-0848 macosx-zip-command-execution(24808)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58665 JVNDB-2006-000877 Mac OS X の Web ブラウザ Safari に任意のコード実行の脆弱性 Mac OS X の Web ブラウザ Safari には、デフォルト設定において、任意のコード実行の脆弱性が存在します。 CVE-2006-0848 16950 CVE-2006-0848 59578 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000877.html 2006-02-23 2009-04-03 View