CVE-2006-0848: Apple Mac OS X
Medium severity, CVSS 5.1. EPSS: 58.1% chance of exploitation in the next 30 days.
The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension.
Affected products
Published 2006-02-22. Last modified 2026-06-16.