The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2006-02-22T23:00:00
Updated: 2024-08-07T16:48:56.602Z
Reserved: 2006-02-22T00:00:00
Link: CVE-2006-0848
Vulnrichment
No data.
NVD
Status : Modified
Published: 2006-02-22T23:02:00.000
Modified: 2024-11-21T00:07:28.720
Link: CVE-2006-0848
Redhat
No data.