Vulnerability Note VU#351217
Apple Safari WebKit component vulnerable to buffer overflow
Apple Safari WebKit component is vulnerable to buffer overflow. This may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition.
The Apple Safari WebKit component contains a heap-based buffer overflow. This vulnerability can be triggered by persuading a user to access a specially crafted web page with Safari.
WebKit may be used in other Apple software including, but not limited to Dashboard and Mail.
A remote attacker may be able to execute arbitrary code or crash any application using WebKit
Install an update
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Apple Computer, Inc.||Affected||-||03 Mar 2006|
|Nokia||Unknown||06 Mar 2006||06 Mar 2006|
CVSS Metrics (Learn More)
This issue was reported in Apple Security Update 2006-001. Apple credits Suresec LTD with reporting this issue.
This document was written by Jeff Gennari
- CVE IDs: CVE-2005-4504
- Date Public: 22 Dec 2005
- Date First Published: 03 Mar 2006
- Date Last Updated: 06 Mar 2006
- Severity Metric: 17.21
- Document Revision: 15
If you have feedback, comments, or additional information about this vulnerability, please send us email.