|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
Mac OS X contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered when an archive file is downloaded with Safari's "Open `safe' files after downloading" option is enabled, and the archive contains a symbolic link, and the target of the symbolic link may be moved to the user's desktop and launched. It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Install Apple Security Update 2006-003, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
Mac OS X
 |
10.4 |
10.4.1 |
10.4.2 |
10.4.3 |
10.4.4 |
10.4.5 |
10.4.6 |
|
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
