CVE-2006-0396
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update...
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.
- Record
CVE-2006-0396- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.
- Record
CVE-2006-0396- Updated
- 2026-11-02
EUVDEUVD-2006-0403 No score
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.
- Record
EUVD-2006-0403- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rrmc-qhwh-87xf No score
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update...
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.
- Record
GHSA-rrmc-qhwh-87xf- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Apple Mac OSX 10.4.5 Mail.app - Real Name Buffer Overflow | 2006-03-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0396 is a medium vulnerability (CVSS 5.1) in Apple Mac Os X, published March 14, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.1%, the 95th percentile. No source names a fixed version.
References
securityfocus.com/bid/17081
osvdb.org/23872
vupen.com/english/advisories/2006/0949
securitytracker.com/id?1015762
kb.cert.org/vuls/id/980084
exchange.xforce.ibmcloud.com/vulnerabilities/25209
Show 7 moreShow less
secunia.com/advisories/19129
digitalmunition.com/DMA%5B2006-0313a%5D.txt
lists.apple.com/archives/security-announce/2006/Mar/msg00001.html
docs.info.apple.com/article.html?artnum=303453
nvd.nist.gov/vuln/detail/CVE-2006-0396
github.com/advisories/GHSA-rrmc-qhwh-87xf