CVE-2006-0400: High severity Apple iOS and macOS vulnerability
Published Mar 14, 2006
·Updated
CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving "crafted archives."
Affected Software
12 affected components
Apple iOS and macOS=10.4.3
Apple Mac OS X Server=10.4.3
Apple iOS and macOS=10.4.1
Apple Mac OS X Server=10.4.2
Apple Mac OS X Server=10.4.4
Apple Mac OS X Server=10.4.1
Apple iOS and macOS=10.4.4
Apple Mac OS X Server=10.4
Apple Mac OS X Server=10.4.5
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.4.2
Remediation
Patch Available
Patch Available
Event History
Mar 14, 2006
CVE Published
11:02 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0400?
CVE-2006-0400 is considered a moderate severity vulnerability due to its potential to bypass the same-origin policy.
2
How do I fix CVE-2006-0400?
To fix CVE-2006-0400, update your Apple Mac OS X to the latest version beyond 10.4.5.
3
Which versions of Mac OS X are affected by CVE-2006-0400?
CVE-2006-0400 affects Apple Mac OS X versions 10.4 through 10.4.5.
4
Can CVE-2006-0400 be exploited remotely?
Yes, CVE-2006-0400 can be exploited by remote attackers to execute unauthorized scripts.
5
What does CVE-2006-0400 vulnerability involve?
CVE-2006-0400 involves crafted archives that allow remote execution of JavaScript in other domains.