CVE-2004-0539

The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to…

published June 11, 2004

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

⚠️ A simple "Show in Finder" button could be your undoing! On Mac OS X 10.3.4 and 10.2.8, this seemingly harmless feature may execute downloaded applications without your consent. 😱 Think of it like a restaurant waiter who brings you a doggy bag without checking the contents – you might end up with a surprise dish you didn't order. This vulnerability allows attackers to slip malicious code right past your defenses, all because of one button! An attacker could exploit this by tricking users into downloading harmful applications, leading to unauthorized access and control of the system. Imagine waking up to find your computer has been taken over by someone else's malicious code – absolutely devastating!

Put simply

Think of it like a restaurant waiter who brings you a doggy bag without checking the contents – you might end up with a surprise dish you didn't order. This vulnerability allows attackers to slip malicious code right past your defenses, all because of one button! This vulnerability in Safari allows downloaded applications to be executed through the "Show in Finder" button, exposing users to arbitrary code execution risk if they inadvertently open harmful files.

What to do

An attacker could exploit this by tricking users into downloading harmful applications, leading to unauthorized access and control of the system. Imagine waking up to find your computer has been taken over by someone else's malicious code – absolutely devastating! To mitigate this risk, ensure you're using a more recent version of macOS that has addressed this issue. Educate users on the dangers of running unknown applications and consider implementing security measures like antivirus software. ⚡ You've got this! Stay vigilant and keep your systems updated for a safer browsing experience. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04840 · 91.9th percentile
Published
2004-06-11T04:00Z
EPSS history
Timeline
  • 11 JUN 04:00Z
    The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to…
    cvelistv5