Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-6165
HistoryNov 29, 2007 - 1:46 a.m.

CVE-2007-6165

2007-11-2901:46:00
CWE-264
CWE-20
mitre
web.nvd.nist.gov
53
cve-2007-6165
apple mac os x leopard
user-assisted
remote attackers
arbitrary code execution
appledouble attachment
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.3

Confidence

High

EPSS

0.117

Percentile

95.4%

JSON

Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment containing an apparently-safe file type and script in a resource fork, which does not warn the user that a separate program is going to be executed. NOTE: this is a regression error related to CVE-2006-0395.

Affected configurations

Nvd
Node
applemac_os_xMatch10.5
VendorProductVersionCPE
applemac_os_x10.5cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

Related

exploitdb 3
cvelist 2
packetstorm 1
metasploit 1
nvd 2
seebug 1
prion 2
cve 1
openvas 2
nessus 2
exploitdb
exploitdb
Apple Mail.app - Image Attachment Command Execution (Metasploit)
2011-03-05 00:00:00
Apple Mail.App 10.5.0 (OSX) - Image Attachment Command Execution (Metasploit)
2006-03-01 00:00:00
Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution
2007-11-20 00:00:00
cvelist
cvelist
CVE-2007-6165
2007-11-29 01:00:00
CVE-2006-0395
2006-08-05 01:00:00
packetstorm
packetstorm
Mail.app Image Attachment Command Execution
2009-10-28 00:00:00
metasploit
metasploit
Mail.app Image Attachment Command Execution
2007-11-26 22:29:07
nvd
nvd
CVE-2007-6165
2007-11-29 01:46:00
CVE-2006-0395
2006-08-05 01:04:00
seebug
seebug
Mail.App 10.5.0 Image Attachment Command Execution (OS X)
2006-03-01 00:00:00
prion
prion
Design/Logic Flaw
2007-11-29 01:46:00
Input validation
2006-08-05 01:04:00
cve
cve
CVE-2006-0395
2006-08-05 01:04:00
openvas
openvas
Mac OS X Security Update 2007-009
2010-05-12 00:00:00
Mac OS X Security Update 2007-009
2010-05-12 00:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2007-009)
2007-12-18 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2006-001)
2006-03-02 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.3

Confidence

High

EPSS

0.117

Percentile

95.4%

JSON
Related for CVE-2007-6165
exploitdb3cvelist2packetstorm1metasploit1nvd2seebug1prion2cve1openvas2nessus2