Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.

apache_mod_php
CoreTypes
LaunchServices
Mail
Safari
rsync

The remote host is running Apple Mac OS X, but lacks Security Update 2006-002.

This security update contains fixes for the following applications :

apache_mod_php CoreTypes LaunchServices Mail Safari rsync

ID	Name	Product	Family	Severity
3475	Mac OS X Multiple Vulnerabilities (Security Update 2006-002)	Nessus Network Monitor	Operating System Detection	high
3474	Mac OS X Multiple Vulnerabilities (Security Update 2006-002)	Nessus Network Monitor	Operating System Detection	high
21073	Mac OS X Multiple Vulnerabilities (Security Update 2006-002)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2006-0396

critical

Tenable Plugins

high

high

high