CVE-2006-0848

no score yetEPSS 58%

The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension.

EPSS: 58% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-16
Published: 2006-02-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:mac_os_x
apple:mac_os_x_server

References

http://docs.info.apple.com/article.html?artnum=303382
http://secunia.com/advisories/18963
http://securitytracker.com/id?1015652
http://www.frsirt.com/exploits/20060222.safari_safefiles_exec.pm.php
http://www.heise.de/english/newsticker/news/69862

Check your stack JSON