CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
5.1 | $0-$5k | 0.00 |
A vulnerability has been found in Apple Mac OS X 10.4.7 (Operating System) and classified as problematic. This vulnerability affects an unknown code of the component LaunchServices. The manipulation with an unknown input leads to a remote code execution vulnerability. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:
The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open safe files after downloading" option is enabled in Safari.
The bug was discovered 08/01/2006. The weakness was published 07/14/2006 by Jesse Ruderman (iDefense) with Mozilla Corporation (Website). The advisory is available at us-cert.gov. This vulnerability was named CVE-2006-3504 since 07/10/2006. The exploitation appears to be difficult. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details are unknown but a public exploit is available.
It is possible to download the exploit at securityfocus.com. It is declared as proof-of-concept. As 0-day the estimated underground price was around $25k-$100k. The vulnerability scanner Nessus provides a plugin with the ID 22125 (Mac OS X Multiple Vulnerabilities (Security Update 2006-004)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family MacOS X Local Security Checks and running in the context l.
Upgrading eliminates this vulnerability. A possible mitigation has been published 3 weeks after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (28146) and Tenable (22125). Similar entries are available at 25512, 26669, 25873 and 31631.
Product
Type
Vendor
Name
Version
License
Support
- end of life
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.6VulDB Meta Temp Score: 5.1
VulDB Base Score: 5.6
VulDB Temp Score: 5.1
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Remote Code ExecutionCWE: Unknown
ATT&CK: Unknown
Local: No
Remote: Yes
Availability: 🔍
Access: Public
Status: Proof-of-Concept
Download: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 22125
Nessus Name: Mac OS X Multiple Vulnerabilities (Security Update 2006-004)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
McAfee IPS: 🔍
McAfee IPS Version: 🔍
Timeline
07/10/2006 🔍07/14/2006 🔍
08/01/2006 🔍
08/01/2006 🔍
08/01/2006 🔍
08/01/2006 🔍
08/02/2006 🔍
08/02/2006 🔍
08/02/2006 🔍
08/02/2006 🔍
08/08/2006 🔍
03/12/2015 🔍
06/24/2019 🔍
Sources
Vendor: apple.comAdvisory: us-cert.gov
Researcher: Jesse Ruderman (iDefense)
Organization: Mozilla Corporation
Status: Not defined
CVE: CVE-2006-3504 (🔍)
X-Force: 28146
Vulnerability Center: 12490 - Apple Mac OS X 10.4.7 Safari Download Validation May Erroneously Identify HTML Files as \x27safe\x27, High
SecurityFocus: 19289 - Apple Mac OS X Multiple Security Vulnerabilities
Secunia: 21253 - Mac OS X Security Update Fixes Multiple Vulnerabilities, Highly Critical
OSVDB: 27743 - Apple Mac OS X LaunchServices Download Validation Bypass
Vupen: ADV-2006-3101
scip Labs: https://www.scip.ch/en/?labs.20150108
See also: 🔍
Entry
Created: 03/12/2015 14:25Updated: 06/24/2019 09:47
Changes: 03/12/2015 14:25 (72), 06/24/2019 09:47 (13)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.