CVE-2006-3504: CVE-2006-3504

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-3504

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Apple Mac OS Safari JavaScript代码绕过漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Apple Mac OS X是苹果家族机器所使用的操作系统。最新的Mac OS X更新修复了多个漏洞，具体如下：下载验证可能将某些包含有HTML的文件错误的识别为"安全"。如果在Safari中下载了这样的文件且Safari的"下载后打开安全的文件"选项已启用，则就会从本地URI自动打开HTML文档，允许文档中嵌入的JavaScript代码绕过访问限制。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2006-3504

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2006-3504

Please Login to view more intelligence information

http://www.securityfocus.com/bid/19289vdb-entryx_refsource_BID
http://www.osvdb.org/27743vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/21253third-party-advisoryx_refsource_SECUNIA
http://www.us-cert.gov/cas/techalerts/TA06-214A.htmlthird-party-advisoryx_refsource_CERT
http://www.vupen.com/english/advisories/2006/3101vdb-entryx_refsource_VUPEN
http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.htmlvendor-advisoryx_refsource_APPLE
https://exchange.xforce.ibmcloud.com/vulnerabilities/28146vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2006-3504

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2006-3504

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2006-3504

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2006-3504

III. Intelligence Information for CVE-2006-3504

IV. Related Vulnerabilities

V. Comments for CVE-2006-3504

Leave a comment