CVE

Id
20050  
CVE No.
CVE-2006-3946  
Status
Candidate  
Description
WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag.  
Phase
Assigned (20060731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
185247 20050 CVE-2006-3946 MISC:http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.html  View
185248 20050 CVE-2006-3946 APPLE:APPLE-SA-2006-09-29  View
185249 20050 CVE-2006-3946 URL:http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html  View
185250 20050 CVE-2006-3946 BID:19250  View
185251 20050 CVE-2006-3946 URL:http://www.securityfocus.com/bid/19250  View
185252 20050 CVE-2006-3946 VUPEN:ADV-2006-3069  View
185253 20050 CVE-2006-3946 URL:http://www.vupen.com/english/advisories/2006/3069  View
185254 20050 CVE-2006-3946 VUPEN:ADV-2006-3852  View
185255 20050 CVE-2006-3946 URL:http://www.vupen.com/english/advisories/2006/3852  View
185256 20050 CVE-2006-3946 OSVDB:27534  View
185257 20050 CVE-2006-3946 URL:http://www.osvdb.org/27534  View
185258 20050 CVE-2006-3946 SECTRACK:1016957  View
185259 20050 CVE-2006-3946 URL:http://securitytracker.com/id?1016957  View
185260 20050 CVE-2006-3946 SECUNIA:21271  View
185261 20050 CVE-2006-3946 URL:http://secunia.com/advisories/21271  View
185262 20050 CVE-2006-3946 SECUNIA:22187  View
185263 20050 CVE-2006-3946 URL:http://secunia.com/advisories/22187  View
185264 20050 CVE-2006-3946 XF:safari-khtmlparser-code-execution(28081)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60703 JVNDB-2006-002969 PHP-Nuke INP の modules.php におけるクロスサイトスクリプティングの脆弱性 PHP-Nuke INP の modules.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-3948 20050 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002969.html  View