Info

Disclosure

Apr 19, 2006

Discovery

Unknown

Dates

Exploit

Apr 19, 2006

Solution

Unknown

Description

Safari contains a flaw that may allow a remote denial of service. The issue is triggered when specially crafted input is processed by the web browser. The crashes occur due to issues with the 'KWQListIteratorImpl::KWQListIteratorImpl', 'QPainter::drawText' and 'objc_msgSend_rtp' functions, and will result in loss of availability for the application. The issues may also allow for the excution of arbitrary code.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Public

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Apple Computer, Inc.

Safari

2.0.3

References

Bugtraq ID: 17634
Secunia Advisory ID: 19686
CVE ID: 2006-1986 (see also: NVD) 2006-1987 (see also: NVD) 2006-1988 (see also: NVD)
Related OSVDB ID: 24819 24820 24821 24822
VUPEN Advisory: ADV-2006-1452
Generic Exploit URL: http://security-protocols.com/poc/sp-x26-1.html
http://security-protocols.com/poc/sp-x26-2.html
http://security-protocols.com/poc/sp-x26-4.html
Vendor URL: http://www.apple.com/macosx/
Other Advisory URL: http://www.security-protocols.com/sp-x26-advisory.php

Credit

Tom Ferris - tommysecurity-protocols.com - Security-Protocols

Direct URL: http://osvdb.org/24823