PT-2006-4380 · Apple · Macos X+1

Jesse Ruderman · Published 2006-08-03 · Updated 2017-07-20 · CVE-2006-3505

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebKit in Apple Mac OS X versions 10.3.9 through 10.4.7

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated.

Recommendations For WebKit in Apple Mac OS X versions 10.3.9 through 10.4.7, consider applying security patches or updates to resolve the issue, as accessing already deallocated objects can lead to crashes and potential code execution.

Fix

Related Identifiers

CVE-2006-3505

Affected Products

Macos X

Webkit

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-3505 · Security Note
• http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html · Vendor Advisory
• http://vupen.com/english/advisories/2006/3101 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28149 · Note
• http://securityfocus.com/bid/19289 · Note
• http://kb.cert.org/vuls/id/566132 · Note
• http://osvdb.org/27744 · Note
• http://us-cert.gov/cas/techalerts/TA06-214A.html · Note
• http://secunia.com/advisories/21253 · Note