CVE-2005-4504: High severity Apple Safari vulnerability

Q: What is the severity of CVE-2005-4504?

CVE-2005-4504 has a severity level that can lead to denial of service through memory consumption and application crash.

Q: How do I fix CVE-2005-4504?

To fix CVE-2005-4504, ensure you update to the latest version of Safari or TextEdit that addresses this vulnerability.

Q: Which versions of Safari are affected by CVE-2005-4504?

CVE-2005-4504 affects Safari versions 1.0 through 2.0.2.

Q: Does CVE-2005-4504 impact macOS versions?

Yes, CVE-2005-4504 impacts macOS X versions 10.4.3 and earlier.

Q: Is CVE-2005-4504 a remote attack vulnerability?

Yes, CVE-2005-4504 allows remote attackers to exploit the vulnerability via specially crafted HTML files.

Published Dec 22, 2005

Updated

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service (memory consumption and application crash) via HTML files with a large ROWSPAN attribute in a TD tag.

Affected Software

75 affected components

Apple Safari=1.2.2

Apple Safari=2.0.1

Apple Safari=2.0.2

Apple Safari=1.0

Apple Safari=1.3

Apple TextEdit<=1.4

Apple Safari=2.0

Apple Safari=1.2.1

Apple Safari=1.1

Apple Safari=1.2

Apple Safari=1.2.3

Apple iOS and macOS=10.4.3

Apple Mac OS X Server=10.4.3

Apple Mac OS X Server=10.3.2

Apple Mac OS X Server=10.1.5

Apple Mac OS X Server=10.1

Apple iOS and macOS=10.2.5

Apple Mac OS X Server=10.2.2

Apple iOS and macOS=10.2.7

Apple iOS and macOS=10.0.2

Apple Mac OS X Server=10.1.1

Apple iOS and macOS=10.2.8

Apple Mac OS X Server=10.2.4

Apple iOS and macOS=10.2.1

Apple Mac OS X Server=10.1.2

Apple Mac OS X Server=10.3.7

Apple Mac OS X Server=10.3.5

Apple iOS and macOS=10.3.1

Apple iOS and macOS=10.3.5

Apple iOS and macOS=10.4.1

Apple Mac OS X Server=10.4.2

Apple iOS and macOS=10.1

Apple Mac OS X Server=10.3.3

Apple Mac OS X Server=10.2.7

Apple iOS and macOS=10.0.1

Apple Mac OS X Server=10.2.3

Apple iOS and macOS=10.0.3

Apple Mac OS X Server=10.4.1

Apple iOS and macOS=10.1.4

Apple iOS and macOS=10.2.4

Apple Mac OS X Server=10.3.4

Apple iOS and macOS=10.3.2

Apple iOS and macOS=10.2.2

Apple iOS and macOS=10.0

Apple iOS and macOS=10.3.7

Apple Mac OS X Server=10.2.5

Apple iOS and macOS=10.1.3

Apple Mac OS X Server=10.4

Apple iOS and macOS=10.3.6

Apple Mac OS X Server=10.3

Apple Mac OS X Server=10.3.8

Apple iOS and macOS=10.1.5

Apple Mac OS X Server=10.2.6

Apple iOS and macOS=10.4

Apple Mac OS X Server=10.3.9

Apple Mac OS X Server=10.2

Apple iOS and macOS=10.3.8

Apple Mac OS X Server=10.2.1

Apple iOS and macOS=10.1.1

Apple Mac OS X Server=10.3.1

Apple Mac OS X Server=10.1.4

Apple iOS and macOS=10.3.9

Apple iOS and macOS=10.3.4

Apple iOS and macOS=10.3.3

Apple iOS and macOS=10.2.6

Apple iOS and macOS=10.2.3

Apple Mac OS X Server=10.0

Apple Mac OS X Server=10.2.8

Apple iOS and macOS=10.2

Apple iOS and macOS=10.4.2

Apple iOS and macOS=10.3

Apple Mac OS X Server=10.3.6

Apple iOS and macOS=10.0.4

Apple Mac OS X Server=10.1.3

Apple iOS and macOS=10.1.2

Event History

Dec 22, 2005

CVE Published

11:03 PM

Dec 23, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4504?

CVE-2005-4504 has a severity level that can lead to denial of service through memory consumption and application crash.

How do I fix CVE-2005-4504?

To fix CVE-2005-4504, ensure you update to the latest version of Safari or TextEdit that addresses this vulnerability.

Which versions of Safari are affected by CVE-2005-4504?