OSVDB ID: 23510

Title: Apple Safari ZIP Archive File Extension Mismatch Arbitrary File Execution

Info

Disclosure
Feb 21, 2006

Discovery
Unknown

Dates

Exploit
Mar 10, 2006

Solution
Mar 17, 2006

Description

 Safari contains a flaw that may allow arbitrary commands execution when user opens malicious Web page or HTML email attachment. The issue is triggered due to an error in the processing of file association meta data in ZIP archives (stored in the "__MACOSX" folder) and mail messages (defined via the AppleDouble MIME format). It is possible that the flaw may result in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Other
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public, Exploit Commercial
Disclosure: OSVDB Verified, Vendor Verified

Solution

 Vendor has released a patch to address this vulnerability. It is possible to correct the flaw by implementing the following workaround: Disable "Open 'safe' files after downloading" in Safari's General preferences.

Products

Apple Computer, Inc.

Mac OS X

 10.4.5

Safari

 2.0.3

Mail

 2.0.5

References

Credit
  • Michael Lehn - lehnmathematik.uni-ulm.de -


Direct URL: http://osvdb.org/23510