CVE-2006-0396

Mac OS X 10.4-10.4.5 - Remote Code Execution via Long Real Name in AppleDouble Email Attachment

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0396. PoCs published by Kevin Finisterre.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Apple Mail (CVE-2006-0396) by crafting a malicious email with a specially formatted AppleSingle file attachment. The overflow occurs in the handling of the 'Real Name' entry, allowing arbitrary code execution.

Description

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kevin Finisterre · perlremoteosx

https://www.exploit-db.com/exploits/1583

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Apple Mail (CVE-2006-0396) by crafting a malicious email with a specially formatted AppleSingle file attachment. The overflow occurs in the handling of the 'Real Name' entry, allowing arbitrary code execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Apple Mail 2.0.7 (746.2) on macOS 10.4.5

No auth needed

Prerequisites: Access to an SMTP server to send the malicious email · Target must open the email in a vulnerable version of Apple Mail

MITRE ATT&CK