Description
The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari.
References
- APPLE-SA-2006-08-01 vendor-advisory
- ADV-2006-3101 vdb-entry
- 21253 third-party-advisory
- macosx-launchservices-script-execution(28146) vdb-entry
- 19289 vdb-entry
- TA06-214A third-party-advisory
- 27743 vdb-entry