[原文]Safari on Apple Mac OS X 10.4.6, when "Open `safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink.
Apple Safari Archive Expansion Symbolic Link Target Execution
Remote / Network Access
Loss of Integrity
Mac OS X contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered when an archive file is downloaded with Safari's "Open `safe' files after downloading" option is enabled, and the archive contains a symbolic link, and the target of the symbolic link may be moved to the user's desktop and launched. It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity.
Install Apple Security Update 2006-003, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.