CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0396

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.233

EPSS Ranking 95.7%

CVSS Severity

CVSS v2 Score 5.1

References

Products affected by CVE-2006-0396

Apple » Mac Os X » Version: 10.4

cpe:2.3:o:apple:mac_os_x:10.4
Apple » Mac Os X » Version: 10.4.1

cpe:2.3:o:apple:mac_os_x:10.4.1
Apple » Mac Os X » Version: 10.4.2

cpe:2.3:o:apple:mac_os_x:10.4.2
Apple » Mac Os X » Version: 10.4.3

cpe:2.3:o:apple:mac_os_x:10.4.3
Apple » Mac Os X » Version: 10.4.4

cpe:2.3:o:apple:mac_os_x:10.4.4
Apple » Mac Os X » Version: 10.4.5

cpe:2.3:o:apple:mac_os_x:10.4.5
Apple » Mac Os X Server » Version: 10.4

cpe:2.3:o:apple:mac_os_x_server:10.4
Apple » Mac Os X Server » Version: 10.4.1

cpe:2.3:o:apple:mac_os_x_server:10.4.1
Apple » Mac Os X Server » Version: 10.4.2

cpe:2.3:o:apple:mac_os_x_server:10.4.2
Apple » Mac Os X Server » Version: 10.4.3

cpe:2.3:o:apple:mac_os_x_server:10.4.3
Apple » Mac Os X Server » Version: 10.4.4

cpe:2.3:o:apple:mac_os_x_server:10.4.4
Apple » Mac Os X Server » Version: 10.4.5

cpe:2.3:o:apple:mac_os_x_server:10.4.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-0396

Products

Pricing

Contact Us