CVE-2004-0486: High severity Apple Mac OS X Server vulnerability
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0486?
CVE-2004-0486 has a medium severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2004-0486?
To mitigate CVE-2004-0486, upgrade your Mac OS X to a version later than 10.3.3 or apply any available security patches.
What versions are affected by CVE-2004-0486?
CVE-2004-0486 affects Mac OS X versions 10.2.8 and 10.3.1 through 10.3.3.
What kind of attack can CVE-2004-0486 enable?
CVE-2004-0486 allows attackers to execute arbitrary code via scripts processed by HelpViewer.
Is CVE-2004-0486 a directory traversal vulnerability?
CVE-2004-0486 was initially reported as a directory traversal vulnerability related to the Safari web browser.