Lucene search

[email protected]CVE-2006-0400

HistoryMar 14, 2006 - 11:02 a.m.

CVE-2006-0400

2006-03-1411:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0400

coretypes

apple

mac os x

remote attackers

same-origin policy

crafted archives

security vulnerability

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.095 Low

EPSS

Percentile

94.7%

JSON

CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving “crafted archives.”

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_x_serverapple mac os x servereq10.4.3
apple:mac_os_xapple mac os xeq10.4.1
apple:mac_os_x_serverapple mac os x servereq10.4.2
apple:mac_os_x_serverapple mac os x servereq10.4.4
apple:mac_os_x_serverapple mac os x servereq10.4.1
apple:mac_os_xapple mac os xeq10.4.4
apple:mac_os_x_serverapple mac os x servereq10.4
apple:mac_os_x_serverapple mac os x servereq10.4.5
apple:mac_os_xapple mac os xeq10.4

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x_server	apple mac os x server	eq	10.4.3
apple:mac_os_x	apple mac os x	eq	10.4.1
apple:mac_os_x_server	apple mac os x server	eq	10.4.2
apple:mac_os_x_server	apple mac os x server	eq	10.4.4
apple:mac_os_x_server	apple mac os x server	eq	10.4.1
apple:mac_os_x	apple mac os x	eq	10.4.4
apple:mac_os_x_server	apple mac os x server	eq	10.4
apple:mac_os_x_server	apple mac os x server	eq	10.4.5
apple:mac_os_x	apple mac os x	eq	10.4

Rows per page:

1-10 of 121

References

docs.info.apple.com/article.html?artnum=303453

lists.apple.com/archives/security-announce/2006/Mar/msg00001.html

secunia.com/advisories/19129

securitytracker.com/id?1015763

www.osvdb.org/23873

www.securityfocus.com/bid/17082

www.vupen.com/english/advisories/2006/0949

exchange.xforce.ibmcloud.com/vulnerabilities/25208

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.095 Low

EPSS

Percentile

94.7%

JSON

Related for CVE-2006-0400

prion1 nessus1