CVE-2006-1447

EPSS 0.76%
Published 12.05.2006 21:02:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ macOS X Version10.4.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.76%	0.723

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Patch

http://secunia.com/advisories/20077

http://www.securityfocus.com/bid/17951

http://www.us-cert.gov/cas/techalerts/TA06-132A.html

US Government Resource

http://www.vupen.com/english/advisories/2006/1779

http://securitytracker.com/id?1016081

http://www.osvdb.org/25591

https://exchange.xforce.ibmcloud.com/vulnerabilities/26416

https://nvd.nist.gov/vuln/detail/CVE-2006-1447

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1447

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1447

EUVD