NVD

Id
62604  
Name
CVE-2006-3946  
Description
WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-31  
Modified Date
2011-06-20  
Seq
2006-3946  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325348 62604 CVE-2006-3946 http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.html  View
325349 62604 CVE-2006-3946 APPLE-SA-2006-09-29  View
325350 62604 CVE-2006-3946 1016957  View
325351 62604 CVE-2006-3946 19250  View
325352 62604 CVE-2006-3946 ADV-2006-3069  View
325353 62604 CVE-2006-3946 ADV-2006-3852  View
325354 62604 CVE-2006-3946 safari-khtmlparser-code-execution(28081)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58467 JVNDB-2006-000663 Apple Mac OS X の WebCore におけるメモリ管理エラーを引き起こす脆弱性 Apple Mac OS X に含まれる WebCore において、特定の HTML を処理した際に WebKit フレームワークにおいてメモリ管理エラーを引き起こす脆弱性が存在します。 CVE-2006-3946 20048 CVE-2006-3946 62604 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000663.html 2006-09-29 2007-04-01 View