Lucene search
MitreCVE-2006-1987HistoryApr 21, 2006 - 10:02 p.m.
CVE-2006-1987
2006-04-2122:02:00
mitre
web.nvd.nist.gov
42
cve-2006-1987
apple safari
denial of service
code execution
invalid frame tag
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
High
EPSS
0.799
Percentile
98.3%
Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which vector is responsible.
Affected configurations
Node
applesafariMatch2.0
ORapplesafariMatch2.0.1
ORapplesafariMatch2.0.2
ORapplesafariMatch2.0.3
Related
nvd
nvd
CVE-2006-1987
2006-04-21 22:02:00
cvelist
cvelist
CVE-2006-1987
2006-04-21 22:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2006-04-21 22:02:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
High
EPSS
0.799
Percentile
98.3%
Related for CVE-2006-1987