WebKit, as used in Safari 5.0.6, allows remote malicious users to cause a denial of service (process crash) or arbitrary code execution.
apple safari 5.0.6