CVE-2011-0152

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0153

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0155

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0164

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0168

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0170

Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted International Color Consortium ICC profile in a JPEG image...

CVE-2011-0149

CVE-2011-0149 concerns WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability arises from improper parsing of HTML elements related to document namespaces, enabling a man-in-the-middle attacker to trigger arbitrary code execution or cause a denial of service (memory corruption a...

CVE-2011-0116

Use-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to DO...

CVE-2011-0123

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0153

CVE-2011-0153 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows MITM attackers to execute arbitrary code or cause memory corruption and application crash via iTunes Store browsing. Connected documents provide concrete details: affected component WebKit, attac...

CVE-2011-0114

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0124

CVE-2011-0124 affects WebKit as used in Apple iTunes before 10.2 on Windows. It allows a man‑in‑the‑middle attacker to execute arbitrary code or cause a memory corruption and application crash via iTunes Store browsing vectors (a distinct issue from other CVEs). Root cause and exact component/imp...

CVE-2011-0134

CVE-2011-0134 refers to a WebKit vulnerability in Apple iTunes on Windows (pre-10.2) where the iTunes Store browsing vectors enable a man-in-the-middle attacker to execute arbitrary code or cause memory corruption and a crash, i.e., a denial-of-service. Affected component: WebKit as used by iTune...

CVE-2011-0141

CVE-2011-0141 affects WebKit used by Apple iTunes on Windows prior to 10.2. The vulnerability arises from memory corruption in WebKit during iTunes Store browsing, which can enable arbitrary code execution or cause a denial of service when loading certain content. Exploitation could lead to a com...

CVE-2011-0147

CVE-2011-0147 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows a man-in-the-middle attacker to cause memory corruption in WebKit via iTunes Store browsing, leading to arbitrary code execution or a denial of service (application crash). Root cause is memory c...

CVE-2011-0148

CVE-2011-0148 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and app crash) via vectors related to iTunes Store browsing. Nessus/OpenVAS entries corrobor...

CVE-2011-0154

CVE-2011-0154 relates to WebKit as used in Apple iTunes before 10.2 on Windows and Apple iOS. The issue is an improper implementation of the JavaScript Array.sort function in WebKit, which can enable a man-in-the-middle attacker to execute arbitrary code or cause memory corruption and an applicat...

CVE-2011-0155

CVE-2011-0155 affects WebKit as used by Apple iTunes on Windows prior to version 10.2. The vulnerability allows a man-in-the-middle to trigger memory corruption in WebKit via iTunes Store browsing, leading to arbitrary code execution or a denial of service (application crash). Root cause is memor...

CVE-2011-0133

The CVE-2011-0133 entry concerns WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability stems from improper access to glyph data during layout actions for floating blocks associated with pseudo-elements, which can enable a man-in-the-middle attacker to trigger arbitrary code exe...

CVE-2011-0130

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...