CVE-2006-5681
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote...
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects.
Exploit likelihood
What each source reports
NVD Score used
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects.
- Record
CVE-2006-5681- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects.
- Record
CVE-2006-5681- Updated
- 2026-11-02
EUVDEUVD-2006-5666 No score
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects.
- Record
EUVD-2006-5666- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w2vg-jw6r-gqf6 No score
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote...
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information (screen images) via a Java applet that accesses images that are being rendered by other embedded QuickTime objects.
- Record
GHSA-w2vg-jw6r-gqf6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5681 is a low vulnerability (CVSS 2.6) in Apple Mac Os X, published December 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.
References
osvdb.org/32380
securitytracker.com/id?1017402
secunia.com/advisories/23438
vupen.com/english/advisories/2006/5072
securityfocus.com/bid/21672
docs.info.apple.com/article.html?artnum=304916
lists.apple.com/archives/Security-announce/2006/Dec/msg00000.html
nvd.nist.gov/vuln/detail/CVE-2006-5681
github.com/advisories/GHSA-w2vg-jw6r-gqf6