NVD脆弱性詳細

CVE-2005-4504

概要	The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service (memory consumption and application crash) via HTML files with a large ROWSPAN attribute in a TD tag.
公表日	2005年12月23日8:03
登録日	2021年1月29日17:59
最終更新日	2017年7月20日10:29

CVSS2.0 : HIGH
スコア	7.8
ベクター	AV:N/AC:L/Au:N/C:N/I:N/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:apple:safari:1.0:::::::*
cpe:2.3:a:apple:safari:1.1:::::::*
cpe:2.3:a:apple:safari:1.2:::::::*
cpe:2.3:a:apple:safari:1.2.1:::::::*
cpe:2.3:a:apple:safari:1.2.2:::::::*
cpe:2.3:a:apple:safari:1.2.3:::::::*
cpe:2.3:a:apple:safari:1.3:::::::*
cpe:2.3:a:apple:safari:2.0:::::::*
cpe:2.3:a:apple:safari:2.0.1:::::::*
cpe:2.3:a:apple:safari:2.0.2:::::::*
cpe:2.3:a:apple:textedit::::::::		1.4

構成2	以上	以下	より上	未満
cpe:2.3:o:apple:mac_os_x:10.0:::::::*
cpe:2.3:o:apple:mac_os_x:10.0.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.0.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.0.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.0.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.6:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.7:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.8:::::::*
cpe:2.3:o:apple:mac_os_x:10.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.6:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.7:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.8:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.9:::::::*
cpe:2.3:o:apple:mac_os_x:10.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.0:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.6:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.7:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.8:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.6:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.7:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.8:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.9:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::*

構成1	以上	以下	より上	未満
cpe:2.3:a:apple:safari:1.0:::::::*
cpe:2.3:a:apple:safari:1.1:::::::*
cpe:2.3:a:apple:safari:1.2:::::::*
cpe:2.3:a:apple:safari:1.2.1:::::::*
cpe:2.3:a:apple:safari:1.2.2:::::::*
cpe:2.3:a:apple:safari:1.2.3:::::::*
cpe:2.3:a:apple:safari:1.3:::::::*
cpe:2.3:a:apple:safari:2.0:::::::*
cpe:2.3:a:apple:safari:2.0.1:::::::*
cpe:2.3:a:apple:safari:2.0.2:::::::*
cpe:2.3:a:apple:textedit::::::::		1.4

構成2	以上	以下	より上	未満
cpe:2.3:o:apple:mac_os_x:10.0:::::::*
cpe:2.3:o:apple:mac_os_x:10.0.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.0.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.0.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.0.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.1.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.6:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.7:::::::*
cpe:2.3:o:apple:mac_os_x:10.2.8:::::::*
cpe:2.3:o:apple:mac_os_x:10.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.3:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.5:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.6:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.7:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.8:::::::*
cpe:2.3:o:apple:mac_os_x:10.3.9:::::::*
cpe:2.3:o:apple:mac_os_x:10.4:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.1:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.2:::::::*
cpe:2.3:o:apple:mac_os_x:10.4.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.0:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.1.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.6:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.7:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.2.8:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.3:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.5:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.6:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.7:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.8:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.3.9:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.1:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.2:::::::*
cpe:2.3:o:apple:mac_os_x_server:10.4.3:::::::*

No	URL	refsource	タグ
1	http://docs.info.apple.com/article.html?artnum=303382	CONFIRM
2	http://docs.info.apple.com/jarticle.html?artnum=303382-en	CONFIRM
3	http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html	APPLE
4	http://secunia.com/advisories/18220	SECUNIA	Vendor Advisory
5	http://secunia.com/advisories/19064	SECUNIA
6	http://security-protocols.com/advisory/sp-x22-advisory.txt	MISC	Exploit Vendor Advisory
7	http://www.kb.cert.org/vuls/id/351217	CERT-VN	US Government Resource
8	http://www.securityfocus.com/bid/16045	BID	Exploit
9	http://www.securityfocus.com/bid/16907	BID
10	http://www.us-cert.gov/cas/techalerts/TA06-062A.html	CERT	US Government Resource
11	http://www.vupen.com/english/advisories/2005/3058	VUPEN
12	http://www.vupen.com/english/advisories/2006/0791	VUPEN
13	https://exchange.xforce.ibmcloud.com/vulnerabilities/23819	XF