CVE-2006-2019 : Detail

CVE-2006-2019

12.66%V4
Network
2006-04-25
15h00 +00:00
2018-10-18
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 1715

Publication date : 2006-04-23 22h00 +00:00
Author : Yannick von Arx
EDB Verified : Yes

<!-- Apple Mac OS X Safari 2.0.3 Vulnerability ========================================= Author: Yannick von Arx Email: yannick[dot]vonarx[at]yanux[dot]ch Release Date: April 23th, 2006 Vendor: Apple Computer Inc. Tested on: iBook G4 1.2 GHz with Mac OS X 10.4.5 (Build 8H14) + all Updates from Apple except "10.4.6 Update" iBook G4 1.33 GHz with Mac OS X 10.4.6 (Build 8I127) + all Updates from Apple PowerMac G4 Dual 867 MHz with Mac OS X 10.4.6 (Build 8I127) + all Updates from Apple iMac G4 800 MHz with Mac OS X 10.4.6 (Build 8I127) + all Updates from Apple Versions affected: Safari 2.0.3 (417.9.2) latest version under 10.4.5 (Build 8H14) and perhaps prior versions Safari 2.0.3 (417.9.2) latest version under 10.4.6 (Build 8I127) and perhaps prior versions Overview: A vulnerabilitiy exists in Safari 2.0.3 (417.9.2) and perhaps in prior versions which causes the operating system to slow down SRCOD (Spinning Rainbow Cursor Of Death), and therefore, it's not possible to launch any applications like Terminal to kill the process. After several minutes Safari crashes. Technical Details: Create a new File with following code ... --> <HTML> <TABLE> <TR><TD ROWSPAN=2000000000> # milw0rm.com [2006-04-24]

Products Mentioned

Configuraton 0

Apple>>Safari >> Version 1.3.1

Apple>>Safari >> Version 2.0.3

References

http://www.securityfocus.com/bid/17674
Tags : vdb-entry, x_refsource_BID
http://securitytracker.com/id?1015982
Tags : vdb-entry, x_refsource_SECTRACK
https://www.exploit-db.com/exploits/1715
Tags : exploit, x_refsource_EXPLOIT-DB
http://www.vupen.com/english/advisories/2006/1508
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/19763
Tags : third-party-advisory, x_refsource_SECUNIA
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.