CVE-2006-1447

Published: May 12, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file.

Affected (1)

Products: Apple: Mac Os X

Apple

1 product

Mac Os X

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.4.6

References (16)

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Source: cve@mitre.org

Patch

http://secunia.com/advisories/20077

Source: cve@mitre.org

http://securitytracker.com/id?1016081

Source: cve@mitre.org

http://www.osvdb.org/25591

Source: cve@mitre.org

http://www.securityfocus.com/bid/17951

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1779

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26416

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html