PT-2006-4380 · Apple · Macos X+1

Jesse Ruderman · Publicado 2006-08-03 · Atualizado 2017-07-20 · CVE-2006-3505

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebKit in Apple Mac OS X versions 10.3.9 through 10.4.7

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated.

Recommendations For WebKit in Apple Mac OS X versions 10.3.9 through 10.4.7, consider applying security patches or updates to resolve the issue, as accessing already deallocated objects can lead to crashes and potential code execution.

Correção

Identificadores relacionados

CVE-2006-3505

Produtos afetados

Macos X

Webkit

Referências · 9

• http://vupen.com/english/advisories/2006/3101 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28149 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3505 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html · Aviso do Fabricante
• http://securityfocus.com/bid/19289 · Nota
• http://kb.cert.org/vuls/id/566132 · Nota
• http://osvdb.org/27744 · Nota
• http://us-cert.gov/cas/techalerts/TA06-214A.html · Nota
• http://secunia.com/advisories/21253 · Nota