CVE-2005-4504

high · 7.8

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service (memory consumption and application crash) via HTML files with a large ROWSPAN attribute in a TD tag.

7.8

CVSS

11.9%

EPSS (exploit prob.)

96th

EPSS percentile

2005-12-22

Published

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

Vendor	Product	Affected versions
apple	safari	1.0
apple	safari	1.1
apple	safari	1.2
apple	safari	1.2.1
apple	safari	1.2.2
apple	safari	1.2.3
apple	safari	1.3
apple	safari	2.0
apple	safari	2.0.1
apple	safari	2.0.2
apple	textedit	<= 1.4
apple	mac_os_x	10.0
apple	mac_os_x	10.0.1
apple	mac_os_x	10.0.2
apple	mac_os_x	10.0.3
apple	mac_os_x	10.0.4
apple	mac_os_x	10.1
apple	mac_os_x	10.1.1
apple	mac_os_x	10.1.2
apple	mac_os_x	10.1.3
apple	mac_os_x	10.1.4
apple	mac_os_x	10.1.5
apple	mac_os_x	10.2
apple	mac_os_x	10.2.1
apple	mac_os_x	10.2.2
apple	mac_os_x	10.2.3
apple	mac_os_x	10.2.4
apple	mac_os_x	10.2.5
apple	mac_os_x	10.2.6
apple	mac_os_x	10.2.7
apple	mac_os_x	10.2.8
apple	mac_os_x	10.3
apple	mac_os_x	10.3.1
apple	mac_os_x	10.3.2
apple	mac_os_x	10.3.3
apple	mac_os_x	10.3.4
apple	mac_os_x	10.3.5
apple	mac_os_x	10.3.6
apple	mac_os_x	10.3.7
apple	mac_os_x	10.3.8

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-4504