Apple Mac OSX Safari 2.0.3 (417.9.2) - Multiple Vulnerabilities

Tested on: Mac OS X 10.4.5 using Safari 03/16/2006 Security-Protocols.com Advisory: http://www.security-protocols.com/advisory/sp-xxx This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2, 1991 as published by the Free...

Design/Logic Flaw

The WebTextRendererWebInternal CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service application crash via an HTML LI tag with a large VALUE attribute list item number, which triggers a null dereference in QPainter::drawText, probably due to...

CVE-2006-1988

The WebTextRendererWebInternal CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service application crash via an HTML LI tag with a large VALUE attribute list item number, which triggers a null dereference in QPainter::drawText, probably due to...

CVE-2006-1988

The CVE-2006-1988 entry concerns Apple Safari 2.0.3 where the WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function can be triggered by an HTML LI tag containing a very large VALUE attribute. This condition triggers a null dereference in QPainter::drawText, likely from a failed memory...