CVE-2006-1987: Apple Safari

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which vector is responsible.

Affected products

• Apple Safari: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only

Published 2006-04-21. Last modified 2026-06-16.