QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-0848

Back to search

CVE-2006-0848

Published: Feb 22, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension.

VendorProductVersions

n/a

n/a

affected
n/a

References

18963
third-party-advisory
x_refsource_SECUNIA
VU#999708
third-party-advisory
x_refsource_CERT-VN
16736
vdb-entry
x_refsource_BID
1015652
vdb-entry
x_refsource_SECTRACK
TA06-053A
third-party-advisory
x_refsource_CERT
ADV-2006-0671
vdb-entry
x_refsource_VUPEN
TA06-062A
third-party-advisory
x_refsource_CERT
23510
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now