CVE-2005-4504: Apple Mac OS X

High severity, CVSS 7.8. EPSS: 11.9% chance of exploitation in the next 30 days.

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service (memory consumption and application crash) via HTML files with a large ROWSPAN attribute in a TD tag.

Affected products

• Apple Mac OS X: version 10.0 only; version 10.0.1 only; version 10.0.2 only; version 10.0.3 only; version 10.0.4 only; version 10.1 only; …
• Apple Mac OS X Server: version 10.0 only; version 10.1 only; version 10.1.1 only; version 10.1.2 only; version 10.1.3 only; version 10.1.4 only; …
• Apple Safari: version 1.0 only; version 1.1 only; version 1.2 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; …
• Apple Textedit: up to and including 1.4

Published 2005-12-22. Last modified 2026-06-16.