← back
CVE-2006-0395

CVE-2006-0395

EPSS 54.0%
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16870unverifiedexploitdbwww.exploit-db.com/exploits/9929unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://docs.info.apple.com/article.html?artnum=303382http://lists.apple.com/archives/client-management/2006/Mar/msg00030.htmlhttp://secunia.com/advisories/19064https://exchange.xforce.ibmcloud.com/vulnerabilities/25027http://www.osvdb.org/23645http://www.securityfocus.com/bid/16907http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlhttp://www.vupen.com/english/advisories/2006/0791