CVE-2006-0395
Mac OS X 10.4 - Unsafe Attachment Handling in Mail Download Validation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-0395.
PoCs published by H D Moore, hdm, kf, including Metasploit module exploits/osx/email/mailapp_image_exec.
AI-analyzed exploit summary This exploit targets a command execution vulnerability in Mail.app on Mac OS X 10.5.0 by sending a maliciously crafted email with an AppleDouble attachment. The payload is embedded in the resource fork of the attachment, which is executed when the email is processed.
Description
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types.
Exploits (3)
This exploit targets a command execution vulnerability in Mail.app on Mac OS X 10.5.0 by sending a maliciously crafted email with an AppleDouble attachment. The payload is embedded in the resource fork of the attachment, which is executed when the email is processed.
This Metasploit module exploits a command execution vulnerability in Mail.app on Mac OS X 10.5.0 by sending a maliciously crafted email with an AppleDouble-encoded image attachment. The exploit leverages a flaw in how Mail.app processes resource forks in attachments to execute arbitrary commands.
This Metasploit module exploits a command execution vulnerability in Mail.app on Mac OS X 10.5.0 by sending a maliciously crafted email with an AppleDouble-encoded attachment. The exploit leverages a flaw in handling image attachments to execute arbitrary commands or payloads.