Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-6015 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple MAC OS X

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
8.5%
top 7.61%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Apple MAC OS X
Timeline
PublishedNov 21
Latest updateMay 1

Description

Buffer overflow in the JavaScript implementation in Safari on Apple Mac OS X 10.4 allows remote attackers to cause a denial of service (application crash) via a long argument to the exec method of a regular expression.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/mac_os_x10.4

🔴Vulnerability Details

1
GHSA
GHSA-9fmg-j3wr-fm3f: Buffer overflow in the JavaScript implementation in Safari on Apple Mac OS X 10↗2022-05-01
▶

💥Exploits & PoCs

1
Exploit-DB
Apple Safari 2.0.4 - JavaScript Regular Expression Match Remote Denial of Service↗2006-11-14
▶

📋Vendor Advisories

1
Red Hat
CVE-2006-6015: Buffer overflow in the JavaScript implementation in Safari on Apple Mac OS X 10↗
▶