| Vulnerability Name: | CVE-2006-3946 (CCN-28081) | ||||||||
| Assigned: | 2006-07-31 | ||||||||
| Published: | 2006-07-31 | ||||||||
| Updated: | 2017-07-20 | ||||||||
| Summary: | WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag. | ||||||||
| CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C)
4.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: Browser Fun Blog, Monday, July 31, 2006 MoBB #31: Safari KHTMLParser::popOneBlock Source: MISC Type: Exploit http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.html Source: MITRE Type: CNA CVE-2006-3946 Source: CCN Type: Mac OS X 10.4.8 and Security Update 2006-006 About the security content of the Mac OS X 10.4.8 Update and Security Update 2006-006 Source: APPLE Type: UNKNOWN APPLE-SA-2006-09-29 Source: CCN Type: SA21271 Mac OS X WebKit "KHTMLParser::popOneBlock()" Memory Corruption Source: SECUNIA Type: Exploit, Vendor Advisory 21271 Source: CCN Type: SA22187 Mac OS X Security Update Fixes Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 22187 Source: CCN Type: SECTRACK ID: 1016957 Mac OS X WebCore WebKit Memory Management Error Lets Remote Users Execute Arbitrary Code Source: SECTRACK Type: UNKNOWN 1016957 Source: OSVDB Type: UNKNOWN 27534 Source: CCN Type: OSVDB ID: 27534 Apple Safari KHTMLParser::popOneBlock Code Execution Source: BID Type: Exploit 19250 Source: CCN Type: BID-19250 Apple Safari KHTMLParser::popOneBlock Buffer Overflow Vulnerability Source: CCN Type: US-CERT Technical Cyber Security Alert TA06-275A Multiple Vulnerabilities in Apple and Adobe Products Source: VUPEN Type: Vendor Advisory ADV-2006-3069 Source: VUPEN Type: Vendor Advisory ADV-2006-3852 Source: XF Type: UNKNOWN safari-khtmlparser-code-execution(28081) Source: XF Type: UNKNOWN safari-khtmlparser-code-execution(28081) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||