CVE-2006-1988: Medium severity Safari vulnerability

Published Apr 21, 2006

Updated

The WebTextRenderer(WebInternal) CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list item number), which triggers a null dereference in QPainter::drawText, probably due to a failed memory allocation that uses the VALUE.

Affected Software

4 affected components

Safari=2.0.1

Safari=2.0.3

Safari=2.0.2

Safari=2.0

Event History

Apr 21, 2006

CVE Published

10:02 PM

Apr 22, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1988?

CVE-2006-1988 is classified as a denial of service vulnerability that can cause Apple Safari to crash.

How do I fix CVE-2006-1988?

To fix CVE-2006-1988, upgrade to a later version of Apple Safari that addresses this vulnerability.

What versions of Safari are affected by CVE-2006-1988?

CVE-2006-1988 affects Apple Safari versions 2.0, 2.0.1, 2.0.2, and 2.0.3.

What type of attack is CVE-2006-1988 associated with?

CVE-2006-1988 is associated with denial of service attacks caused by exploiting a null dereference issue.

Can CVE-2006-1988 be exploited remotely?

Yes, CVE-2006-1988 can be exploited remotely by sending malicious HTML content to the target browser.