CVEvulnerability

CVE-2006-3504

5.1 MEDIUM Published 2006-08-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari.

Affected configurations

• apple mac os x 10.4.7 • apple mac os x server 10.4.7

References