Lucene search

[email protected]CVE-2006-3224

HistoryJun 26, 2006 - 4:05 p.m.

CVE-2006-3224

2006-06-2616:05:00

[email protected]

web.nvd.nist.gov

cve-2006-3224

apple safari

cpu consumption

dos

javascript vulnerability

nvd

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.2%

JSON

Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop. NOTE: it could be argued that this is not a vulnerability, unless it interferes with the operation of the system outside of the scope of Safari itself.

Affected configurations

NVD

Node

applesafariMatch2.0.3_417.9.3mac_os_x_10.4.6

CPENameOperatorVersion
apple:safariapple safarieq2.0.3_417.9.3

CPE	Name	Operator	Version
apple:safari	apple safari	eq	2.0.3_417.9.3

References

lists.grok.org.uk/pipermail/full-disclosure/2006-May/046150.html

exchange.xforce.ibmcloud.com/vulnerabilities/26558

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.2%

JSON

Related for CVE-2006-3224

nvd1 cvelist1