CVE-2006-1447 — Apple MAC OS X vulnerability

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.8%
top 26.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple MAC OS X
Timeline
PublishedMay 12
Latest updateMay 1

Description

LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/mac_os_x10.4.6

Patches

Patch: lists.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-qv66-548c-jwwf: LaunchServices in Apple Mac OS X 10↗2022-05-01
▶