CVE-2006-3946

Published Jul 31, 2006

Last updated 7 years ago

Overview

Description: WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DFDCF83E-620C-40FA-9901-5D939E315143"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AFD4DE58-46C7-4E69-BF36-C5FD768B8248"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CF824694-52DE-44E3-ACAD-60B2A84CD3CE"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B73A0891-A37A-4E0D-AA73-B18BFD6B1447"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C580935-0091-4163-B747-750FB7686973"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BB0F2132-8431-4CEF-9A3D-A69425E3834E"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8719F3C4-F1DE-49B5-9301-22414A2B6F9C"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References