CVE-2004-0486

No fix known EPSS 10%

HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.

Published 2004-05-28 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server