Lucene search

ChromeCVE-2011-2872

HistoryMar 08, 2012 - 10:55 p.m.

CVE-2011-2872

2012-03-0822:55:01

CWE-119

Chrome

web.nvd.nist.gov

cve-2011-2872

webkit

apple ios

itunes

remote code execution

denial of service

memory corruption

application crash

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.01

Percentile

83.9%

JSON

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.

Affected configurations

Nvd

Node

appleiphone_osRange<5.1

Node

appleitunesRange<10.6

VendorProductVersionCPE
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
appleitunes*cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::
apple	itunes	*	cpe:2.3:a:apple:itunes::::::::

References

lists.apple.com/archives/security-announce/2012/Mar/msg00000.html

lists.apple.com/archives/security-announce/2012/Mar/msg00001.html

lists.apple.com/archives/security-announce/2012/Mar/msg00003.html

osvdb.org/79911

secunia.com/advisories/48274

secunia.com/advisories/48288

secunia.com/advisories/48377

www.securityfocus.com/bid/52365

www.securitytracker.com/id?1026774

exchange.xforce.ibmcloud.com/vulnerabilities/73801

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17438

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.01

Percentile

83.9%

JSON

Related for CVE-2011-2872