CVE-2006-0395
Mac OS X 10.4 - Code Injection
Title source: llmDescription
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by H D Moore · rubyremoteosx
https://www.exploit-db.com/exploits/9929
metasploit
WORKING POC
MANUAL
by hdm, kf · rubypocunix
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/email/mailapp_image_exec.rb
References (8)
Scores
EPSS
0.6401
EPSS Percentile
98.4%
Details
Status
published
Products (2)
apple/mac_os_x
10.4.5
apple/mac_os_x_server
10.4.5
Published
Aug 05, 2006
Tracked Since
Feb 18, 2026