CVE-2006-1987: High severity Safari vulnerability

Published Apr 21, 2006

Updated

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which vector is responsible.

Affected Software

4 affected components

Safari=2.0.1

Safari=2.0.3

Safari=2.0.2

Safari=2.0

Event History

Apr 21, 2006

CVE Published

10:02 PM

Apr 22, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1987?

CVE-2006-1987 is considered to be a moderate severity vulnerability that allows denial of service attacks.

How do I fix CVE-2006-1987?

To fix CVE-2006-1987, users should update their Apple Safari browser to a version that is not affected by this vulnerability.

What versions of Apple Safari are affected by CVE-2006-1987?

CVE-2006-1987 affects Apple Safari versions 2.0, 2.0.1, 2.0.2, and 2.0.3.

Can CVE-2006-1987 lead to code execution?

CVE-2006-1987 may allow remote attackers to execute code under certain conditions, specifically during a denial of service scenario.

What type of attack does CVE-2006-1987 enable?

CVE-2006-1987 enables a denial of service attack through the exploitation of an invalid FRAME tag.