First published: Fri Mar 03 2006(Updated: )
Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | =10.4.3 | |
Apple Mac OS X Server | =10.4.3 | |
macOS Yosemite | =10.4.1 | |
Apple Mac OS X Server | =10.4.2 | |
Apple Mac OS X Server | =10.4.4 | |
Apple Mac OS X Server | =10.4.1 | |
macOS Yosemite | =10.4.4 | |
Apple Mac OS X Server | =10.4 | |
Apple Mac OS X Server | =10.4.5 | |
macOS Yosemite | =10.4 | |
macOS Yosemite | =10.4.5 | |
macOS Yosemite | =10.4.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-0389 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
To fix CVE-2006-0389, users should update their Mac OS X to a version later than 10.4.5 where this vulnerability is addressed.
CVE-2006-0389 affects Mac OS X versions 10.4 through 10.4.5.
CVE-2006-0389 is a cross-site scripting (XSS) vulnerability.
Yes, CVE-2006-0389 can be exploited remotely by attackers through malicious RSS feeds.