CVE-2004-0486: Apple Mac OS X

High severity, CVSS 7.6. EPSS: 9.7% chance of exploitation in the next 30 days.

HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.

Affected products

• Apple Mac OS X: version 10.3 only; version 10.3.1 only; version 10.3.2 only; version 10.3.3 only
• Apple Mac OS X Server: version 10.3 only; version 10.3.1 only; version 10.3.2 only; version 10.3.3 only

Published 2004-07-07. Last modified 2026-06-16.