Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-0397

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2006-0397
Last Modified 07 Mar 2011 09:29:56
Published 14 Mar 2006 06:02:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2006-0397

Summary

Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different.

Vulnerable Systems

Operating System

  • Apple Mac Os X 10.4

  • Apple Mac Os X 10.4.1

  • Apple Mac Os X 10.4.2

  • Apple Mac Os X 10.4.3

  • Apple Mac Os X 10.4.4

  • Apple Mac Os X 10.4.5

  • Apple Mac Os X Server 10.4

  • Apple Mac Os X Server 10.4.1

  • Apple Mac Os X Server 10.4.2

  • Apple Mac Os X Server 10.4.3

  • Apple Mac Os X Server 10.4.4

  • Apple Mac Os X Server 10.4.5


References

SECUNIA - 19129

XF - macosx-safefiletype-command-execution(25269)

VUPEN - ADV-2006-0949

OSVDB - 23869

SECTRACK - 1015760

APPLE - APPLE-SA-2006-03-13

CONFIRM - http://docs.info.apple.com/article.html?artnum=303453

Related Patches

Apple 2006-03-13 Security Update 2006-002 Mac OS X 10.4.5 (PPC)

Apple 2006-03-16 Security Update 2006-002 v.1.1 Mac OS X 10.4.5 (PPC)


Last Updated: 27 May 2016 10:41:38