CVE-2006-0395

Mac OS X 10.4 - Code Injection

Title source: llm

Description

The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types.

Exploits (3)

exploitdb WORKING POC VERIFIED
by H D Moore · rubyremoteosx
https://www.exploit-db.com/exploits/9929
exploitdb WORKING POC
rubyremotemultiple
https://www.exploit-db.com/exploits/16870
metasploit WORKING POC MANUAL
by hdm, kf · rubypocunix
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/email/mailapp_image_exec.rb

Scores

EPSS 0.6401
EPSS Percentile 98.4%

Details

Status published
Products (2)
apple/mac_os_x 10.4.5
apple/mac_os_x_server 10.4.5
Published Aug 05, 2006
Tracked Since Feb 18, 2026