What is the severity of CVE-2006-3504?

CVE-2006-3504 has been classified as a moderate vulnerability due to the potential for executing malicious JavaScript in a local context.

How do I fix CVE-2006-3504?

To fix CVE-2006-3504, disable the 'Open 'safe' files after downloading' option in Safari or update to a later version of macOS that addresses this vulnerability.

What operating systems are affected by CVE-2006-3504?

CVE-2006-3504 affects Apple Mac OS X version 10.4.7 and Apple Mac OS X Server version 10.4.7.

What type of attack does CVE-2006-3504 facilitate?

CVE-2006-3504 can facilitate attacks through the execution of arbitrary JavaScript code when certain HTML files are identified as 'safe'.

Is CVE-2006-3504 still a concern today?

While CVE-2006-3504 is an older vulnerability, its impact can still be a concern for users running unsupported or outdated versions of macOS.

Vulnerability/
CVE-2006-3504

medium

5.1

CWE

NVD-CWE-Other

3/8/2006

7/8/2024

CVE-2006-3504

First published: Thu Aug 03 2006(Updated: )

The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
macOS Yosemite	=10.4.7
Apple Mac OS X Server	=10.4.7

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2006-3504?
CVE-2006-3504 has been classified as a moderate vulnerability due to the potential for executing malicious JavaScript in a local context.
How do I fix CVE-2006-3504?
To fix CVE-2006-3504, disable the 'Open 'safe' files after downloading' option in Safari or update to a later version of macOS that addresses this vulnerability.
What operating systems are affected by CVE-2006-3504?
CVE-2006-3504 affects Apple Mac OS X version 10.4.7 and Apple Mac OS X Server version 10.4.7.
What type of attack does CVE-2006-3504 facilitate?
CVE-2006-3504 can facilitate attacks through the execution of arbitrary JavaScript code when certain HTML files are identified as 'safe'.
Is CVE-2006-3504 still a concern today?
While CVE-2006-3504 is an older vulnerability, its impact can still be a concern for users running unsupported or outdated versions of macOS.

agent/type
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/weakness
agent/references
agent/author
agent/severity
agent/description
agent/event
agent/first-publish-date
agent/source
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
agent/softwarecombine
vendor/apple
canonical/macos yosemite
version/macos yosemite/10.4.7
canonical/apple mac os x server
version/apple mac os x server/10.4.7

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2006-3504?
CVE-2006-3504 has been classified as a moderate vulnerability due to the potential for executing malicious JavaScript in a local context.
How do I fix CVE-2006-3504?
To fix CVE-2006-3504, disable the 'Open 'safe' files after downloading' option in Safari or update to a later version of macOS that addresses this vulnerability.
What operating systems are affected by CVE-2006-3504?
CVE-2006-3504 affects Apple Mac OS X version 10.4.7 and Apple Mac OS X Server version 10.4.7.
What type of attack does CVE-2006-3504 facilitate?
CVE-2006-3504 can facilitate attacks through the execution of arbitrary JavaScript code when certain HTML files are identified as 'safe'.
Is CVE-2006-3504 still a concern today?
While CVE-2006-3504 is an older vulnerability, its impact can still be a concern for users running unsupported or outdated versions of macOS.