CVE-2006-0388

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources.

Metrics

CVSS 2.0 2.6/10AV:L/AC:H/Au:N/C:N/I:P/A:P

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.htmlPatch
http://secunia.com/advisories/19064Patch, Vendor Advisory
http://securitytracker.com/id?1015713Patch
http://www.securityfocus.com/bid/16907Patch
http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2006/0791Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25038
http://docs.info.apple.com/article.html?artnum=303382
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.htmlPatch
http://secunia.com/advisories/19064Patch, Vendor Advisory
http://securitytracker.com/id?1015713Patch
http://www.securityfocus.com/bid/16907Patch
http://www.us-cert.gov/cas/techalerts/TA06-062A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2006/0791Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25038

Timeline

Published: Mar 3, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-03892.6Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbi CVE-2006-03911.7Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers CVE-2006-03925.1Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execut CVE-2006-03934.0OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in CVE-2006-03955.1The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which a CVE-2006-03965.1Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute CVE-2006-03977.5Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i CVE-2006-03987.5Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i CVE-2006-03997.5Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user i CVE-2006-04007.5CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domai CVE-2006-04014.6Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypas CVE-2006-04027.5SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands.