PT-2006-3003 · Apple · Safari

Yannick Von Arx · Published 2006-04-25 · Updated 2018-10-18 · CVE-2006-2019

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apple Mac OS X Safari versions 1.3.1 through 2.0.3

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and crash, by using a TD element with a large number in the rowspan attribute.

Recommendations For Apple Mac OS X Safari versions 1.3.1 through 2.0.3, consider avoiding the use of TD elements with large numbers in the rowspan attribute until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-2019

Affected Products

Safari

References · 10

• 🔥 http://securitytracker.com/id?1015982 · Exploit
• 🔥 https://exploit-db.com/exploits/1715 · Exploit
• http://secunia.com/advisories/19763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2019 · Security Note
• http://securityfocus.com/bid/17674 · Note
• http://securityfocus.com/archive/1/431944/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/1508 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25998 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045472.html · Note
• http://securityfocus.com/archive/1/431874/100/0/threaded · Note