CVE-2006-0396

2006-03-1411:02:00

[email protected]

web.nvd.nist.gov

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.45

Percentile

97.4%

JSON

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.

Affected configurations

Nvd

Node

applemac_os_xMatch10.4

applemac_os_xMatch10.4.1

applemac_os_xMatch10.4.2

applemac_os_xMatch10.4.3

applemac_os_xMatch10.4.4

applemac_os_xMatch10.4.5

applemac_os_x_serverMatch10.4

applemac_os_x_serverMatch10.4.1

applemac_os_x_serverMatch10.4.2

applemac_os_x_serverMatch10.4.3

applemac_os_x_serverMatch10.4.4

applemac_os_x_serverMatch10.4.5

VendorProductVersionCPE
applemac_os_x10.4cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*
applemac_os_x10.4.1cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*
applemac_os_x10.4.2cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*
applemac_os_x10.4.3cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*
applemac_os_x10.4.4cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*
applemac_os_x10.4.5cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*
applemac_os_x_server10.4cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*
applemac_os_x_server10.4.1cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*
applemac_os_x_server10.4.2cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*
applemac_os_x_server10.4.3cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.4	cpe:2.3:o:apple:mac_os_x:10.4:::::::*
apple	mac_os_x	10.4.1	cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
apple	mac_os_x	10.4.2	cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
apple	mac_os_x	10.4.3	cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
apple	mac_os_x	10.4.4	cpe:2.3:o:apple:mac_os_x:10.4.4:::::::*
apple	mac_os_x	10.4.5	cpe:2.3:o:apple:mac_os_x:10.4.5:::::::*
apple	mac_os_x_server	10.4	cpe:2.3:o:apple:mac_os_x_server:10.4:::::::*
apple	mac_os_x_server	10.4.1	cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::*
apple	mac_os_x_server	10.4.2	cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::*
apple	mac_os_x_server	10.4.3	cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::*