CVE-2006-1457: Apple Mac OS X

Low severity, CVSS 2.6. EPSS: 2.2% chance of exploitation in the next 30 days.

Safari on Apple Mac OS X 10.4.6, when "Open `safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink.

Affected products

  • Apple Mac OS X: version 10.4.6 only
  • Apple Mac OS X Server: version 10.4.6 only

Published 2006-05-12. Last modified 2026-06-16.