CVE-2006-0398: Code Injection

Published Mar 14, 2006

Updated

Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different.

Affected Software

12 affected components

Apple iOS and macOS=10.4.3

Apple Mac OS X Server=10.4.3

Apple iOS and macOS=10.4.1

Apple Mac OS X Server=10.4.2

Apple Mac OS X Server=10.4.4

Apple Mac OS X Server=10.4.1

Apple iOS and macOS=10.4.4

Apple Mac OS X Server=10.4

Apple Mac OS X Server=10.4.5

Apple iOS and macOS=10.4

Apple iOS and macOS=10.4.5

Apple iOS and macOS=10.4.2

Remediation

Patch Available

http://secunia.com/advisories/19129

Event History

Mar 14, 2006

CVE Published

11:02 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0398?

CVE-2006-0398 has been classified as a moderate severity vulnerability due to its exploitation potential leading to user deception.

How do I fix CVE-2006-0398?

To mitigate CVE-2006-0398, users should update their system to the latest version of Mac OS X beyond 10.4.5.

What systems are affected by CVE-2006-0398?

CVE-2006-0398 affects Apple Mac OS X versions 10.4 up to and including 10.4.5.

What type of attack does CVE-2006-0398 enable?

CVE-2006-0398 enables an attacker to trick users into opening unsafe applications disguised as safe file types.

Is CVE-2006-0398 specific to Safari?

CVE-2006-0398 is related to unspecified vulnerabilities in Safari, LaunchServices, and/or CoreTypes.