5758 matches found
CVE-2011-0259
CVE-2011-0259 is tied to a CoreFoundation memory corruption defect in Apple iTunes prior to 10.5 caused by improper string tokenization. The vulnerability enables man‑in‑the‑middle attackers to potentially execute arbitrary code or cause a crash. Public sources describe the issue as a memory corr...
CVE-2011-2341
CVE-2011-2341 affects WebKit as used in Apple iTunes before 10.5. The vulnerability allows man-in-the-middle attackers to execute arbitrary code or cause memory corruption and an application crash via iTunes Store browsing related vectors. The OpenVAS/Nessus entries in the connected data corrobor...
CVE-2011-2356
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-3236
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-3238
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-3252
Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Advanced Audio Coding AAC stream...
CVE-2011-2816
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-3233
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-3233
CVE-2011-3233 affects WebKit as used by Apple iTunes before version 10.5. The vulnerability, revealed through iTunes Store browsing, allows a man-in-the-middle attacker to cause memory corruption and application crash or to execute arbitrary code. This is a WebKit-related issue that can lead to a...
CVE-2011-3236
CVE-2011-3236 affects WebKit as used by Apple iTunes prior to 10.5. The vulnerability allows man-in-the-middle attackers to cause memory corruption and an application crash, enabling arbitrary code execution or denial of service via iTunes Store browsing vectors. The provided documents do not inc...
CVE-2011-3239
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-2813
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-2811
CVE-2011-2811 affects WebKit as used in Apple iTunes before 10.5. The vulnerability allows man-in-the-middle attackers to cause memory corruption in the WebKit component via iTunes Store browsing, potentially enabling arbitrary code execution or a denial of service (application crash). The descri...
CVE-2011-2352
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-2811
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-3219
CVE-2011-3219 corresponds to a buffer overflow in Apple CoreMedia as used by iTunes prior to 10.5, allowing remote code execution or a crash when parsing H.264 movie streams. The issue is triggered by crafted H.264 data in a movie file, and affected products include Apple QuickTime/CoreMedia impl...
CVE-2011-3252
CVE-2011-3252 corresponds to a buffer overflow in Apple QuickTime/CoreAudio when parsing AAC audio streams, enabling remote code execution. Public docs indicate the flaw exists in how AAC data is read to compute lengths used in memory copies, potentially allowing an attacker to run arbitrary code...
CVE-2011-2339
The CVE-2011-2339 entry concerns WebKit as used in Apple iTunes prior to v10.5. The vulnerability enables man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and crash) via iTunes Store browsing-related vectors. This is tied to WebKit/Apple iTunes...
CVE-2011-0259
CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...
CVE-2011-3237
CVE-2011-3237 affects WebKit as used by Apple iTunes before version 10.5. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing-related vectors. The connected Nessus entry no...