CVE-2004-0486

HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.

• http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html
• http://lists.apple.com/mhonarc/security-announce/msg00053.html
• http://secunia.com/advisories/11622/Patch, Vendor Advisory
• http://securitytracker.com/id?1010167
• http://www.fundisom.com/owned/warningVendor Advisory
• http://www.kb.cert.org/vuls/id/578798Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/6184
• http://www.securityfocus.com/bid/10356Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16166
• http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html
• http://lists.apple.com/mhonarc/security-announce/msg00053.html
• http://secunia.com/advisories/11622/Patch, Vendor Advisory
• http://securitytracker.com/id?1010167
• http://www.fundisom.com/owned/warningVendor Advisory
• http://www.kb.cert.org/vuls/id/578798Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/6184
• http://www.securityfocus.com/bid/10356Exploit, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16166

Published

Jul 7, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0480Argument injection vulnerability in IBM Lotus Notes 6.0.3 an…
• CVE-2004-0481The logging feature in kcms_configure in the KCMS package on…
• CVE-2004-0482Multiple integer overflows in (1) procfs_cmdline.c, (2) proc…
• CVE-2004-0483Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allo…
• CVE-2004-0484mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows re…
• CVE-2004-0485The default protocol helper for the disk: URI on Mac OS X 10…
• CVE-2004-0487A certain ActiveX control in Symantec Norton AntiVirus 2004 …
• CVE-2004-0488Stack-based buffer overflow in the ssl_util_uuencode_binary …
• CVE-2004-0489Argument injection vulnerability in the SSH URI handler for …
• CVE-2004-0490cPanel, when compiling Apache 1.3.29 and PHP with the mod_ph…
• CVE-2004-0491The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 d…
• CVE-2004-0492Heap-based buffer overflow in proxy_util.c for mod_proxy in …