Lucene search

K
cve[email protected]CVE-2012-0628
HistoryMar 08, 2012 - 10:55 p.m.

CVE-2012-0628

2012-03-0822:55:03
CWE-119
web.nvd.nist.gov
32
cve-2012-0628
remote code execution
denial of service
webkit
apple ios
itunes
memory corruption
application crash

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.

Affected configurations

NVD
Node
appleiphone_osRange<5.1
Node
appleitunesRange<10.6
CPENameOperatorVersion
apple:iphone_osapple iphone oslt5.1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%