NVD

Id
62178  
Name
CVE-2006-3504  
Description
The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open "safe" files after downloading" option is enabled in Safari.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-02  
Modified Date
2011-03-07  
Seq
2006-3504  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322136 62178 CVE-2006-3504 APPLE-SA-2006-08-01  View
322137 62178 CVE-2006-3504 19289  View
322138 62178 CVE-2006-3504 TA06-214A  View
322139 62178 CVE-2006-3504 ADV-2006-3101  View
322140 62178 CVE-2006-3504 macosx-launchservices-script-execution(28146)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58753 JVNDB-2006-001019 LaunchServices の Download Validation における Javascript を実行される脆弱性 LaunchServices の Download Validation は、特定の HTML を "安全" と識別するため、Safari 上で "ダウンロード後に安全なファイルを開く" オプションが有効になっている際、ローカルコンテキスト内の Javascript を実行される脆弱性が存在します。 CVE-2006-3504 19606 CVE-2006-3504 62178 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001019.html 2006-08-01 2012-06-26 View