CVE-2006-3504: Medium severity Apple iOS and macOS vulnerability
The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3504?
CVE-2006-3504 has been classified as a moderate vulnerability due to the potential for executing malicious JavaScript in a local context.
How do I fix CVE-2006-3504?
To fix CVE-2006-3504, disable the 'Open 'safe' files after downloading' option in Safari or update to a later version of macOS that addresses this vulnerability.
What operating systems are affected by CVE-2006-3504?
CVE-2006-3504 affects Apple Mac OS X version 10.4.7 and Apple Mac OS X Server version 10.4.7.
What type of attack does CVE-2006-3504 facilitate?
CVE-2006-3504 can facilitate attacks through the execution of arbitrary JavaScript code when certain HTML files are identified as 'safe'.
Is CVE-2006-3504 still a concern today?
While CVE-2006-3504 is an older vulnerability, its impact can still be a concern for users running unsupported or outdated versions of macOS.