Description
LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file.
References
- 17951 vdb-entry
- ADV-2006-1779 vdb-entry
- TA06-132A third-party-advisory
- 1016081 vdb-entry
- APPLE-SA-2006-05-11 vendor-advisory
- 25591 vdb-entry
- 20077 third-party-advisory
- macos-launchservices-security-bypass(26416) vdb-entry