CVE-2006-3946

WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag.

• CWE-119

• http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.htmlExploit
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
• http://secunia.com/advisories/21271Exploit, Vendor Advisory
• http://secunia.com/advisories/22187Vendor Advisory
• http://securitytracker.com/id?1016957
• http://www.osvdb.org/27534
• http://www.securityfocus.com/bid/19250Exploit
• http://www.vupen.com/english/advisories/2006/3069Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3852Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28081
• http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.htmlExploit
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
• http://secunia.com/advisories/21271Exploit, Vendor Advisory
• http://secunia.com/advisories/22187Vendor Advisory
• http://securitytracker.com/id?1016957
• http://www.osvdb.org/27534
• http://www.securityfocus.com/bid/19250Exploit
• http://www.vupen.com/english/advisories/2006/3069Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3852Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28081

Published

Jul 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3940Multiple SQL injection vulnerabilities in phpbb-Auction allo…
• CVE-2006-3941Unspecified vulnerability in the daemons for Sun N1 Grid Eng…
• CVE-2006-3942The server driver (srv.sys) in Microsoft Windows NT 4.0, 200…
• CVE-2006-3943Stack-based buffer overflow in NDFXArtEffects in Microsoft I…
• CVE-2006-3944Microsoft Internet Explorer 6 on Windows XP SP2 allows remot…
• CVE-2006-3945The CSS functionality in Opera 9 on Windows XP SP2 allows re…
• CVE-2006-3947PHP remote file inclusion vulnerability in components/com_ma…
• CVE-2006-3948Cross-site scripting (XSS) vulnerability in modules.php in P…
• CVE-2006-3949PHP remote file inclusion vulnerability in artlinks.dispnew.…
• CVE-2006-3950SQL injection vulnerability in x-statistics.php in X-Scripts…
• CVE-2006-3951PHP remote file inclusion vulnerability in moodle.php in Mam…
• CVE-2006-3952Stack-based buffer overflow in EFS Software Easy File Sharin…