Vulnerability Details : CVE-2006-1447
LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file.
Products affected by CVE-2006-1447
- cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-1447
1.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-1447
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2006-1447
-
http://www.vupen.com/english/advisories/2006/1779
Site en construction
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/26416
-
http://www.securityfocus.com/bid/17951
-
http://www.us-cert.gov/cas/techalerts/TA06-132A.html
Page Not Found | CISAUS Government Resource
-
http://lists.apple.com/archives/security-announce/2006/May/msg00003.html
Apple - Lists.apple.comPatch
-
http://securitytracker.com/id?1016081
Jump to