QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-3946

Back to search

CVE-2006-3946

Published: Jul 31, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag.

VendorProductVersions

n/a

n/a

affected
n/a

References

22187
third-party-advisory
x_refsource_SECUNIA
ADV-2006-3852
vdb-entry
x_refsource_VUPEN
27534
vdb-entry
x_refsource_OSVDB
21271
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2006-09-29
vendor-advisory
x_refsource_APPLE
19250
vdb-entry
x_refsource_BID
1016957
vdb-entry
x_refsource_SECTRACK
ADV-2006-3069
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2006-3946 - Security Vulnerability | QwikSec