Description
Safari on Apple Mac OS X 10.4.6, when "Open `safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink.
References
- 17951 vdb-entry
- 1016069 vdb-entry
- ADV-2006-1779 vdb-entry
- TA06-132A third-party-advisory
- 25598 vdb-entry
- safari-archive-code-execution(26427) vdb-entry
- VU#519473 third-party-advisory
- APPLE-SA-2006-05-11 vendor-advisory
- 20077 third-party-advisory