CVE-2011-0140

CVE-2011-0140 affects WebKit used by Apple iTunes on Windows prior to 10.2. It allows MITM-related vectors in iTunes Store browsing to trigger memory corruption, enabling arbitrary code execution or a denial of service (application crash). The vulnerability is rooted in WebKit components within i...

CVE-2011-0191

Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...

CVE-2011-0145

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0111

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0126

CVE-2011-0126 , as described in the initial document, affects WebKit as used by Apple iTunes prior to version 10.2 on Windows. The vulnerability enables man-in-the-middle attackers to cause memory corruption or execute arbitrary code, or to cause a denial of service, via vectors related to iTunes...

CVE-2011-0119

CVE-2011-0119 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) through vectors related to iTunes Store browsing. The provided documen...

CVE-2011-0121

CVE-2011-0121 affects WebKit as used by Apple iTunes prior to version 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to trigger memory corruption that can lead to arbitrary code execution or a denial of service (application crash) via iTunes Store browsing vectors. Exploita...

CVE-2011-0165

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0112

CVE-2011-0112 affects WebKit as used in Apple iTunes prior to version 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing. Root cause: is...

CVE-2011-0150

CVE-2011-0150 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing. Root cause and exact exp...

CVE-2011-0142

CVE-2011-0142 affects WebKit as used in Apple iTunes before 10.2 on Windows. It enables MITM attackers to execute arbitrary code or trigger a denial of service (memory corruption and app crash) via iTunes Store browsing vectors. Connected documents corroborate WebKit/iTunes-related exposure but d...

CVE-2011-0135

CVE-2011-0135 affects WebKit used by Apple iTunes on Windows (pre-10.2). It allows a man-in-the-middle to cause memory corruption and arbitrary code execution or a denial of service via iTunes Store browsing. Exploitation details are not provided in the connected documents.

CVE-2011-0151

CVE-2011-0151 concerns WebKit as used in Apple iTunes before 10.2 on Windows. The issue allows man‑in‑the‑middle attackers to trigger memory corruption via iTunes Store browsing, potentially enabling arbitrary code execution or causing a denial of service. The connected Nessus/OpenVAS entries ref...

CVE-2011-0114

WebKit, as used in Apple iTunes before 10.2 on Windows, is vulnerable to memory corruption that lets MITM attackers execute arbitrary code or cause a denial of service via vectors related to iTunes Store browsing.

CVE-2011-0156

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0130

CVE-2011-0130 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows memory corruption during iTunes Store browsing, enabling a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (application crash). The description mentions a memory...

CVE-2011-0117

CVE-2011-0117 affects WebKit as used by Apple iTunes on Windows prior to 10.2. The vulnerability enables man‑in‑the‑middle attackers to trigger memory corruption, leading to arbitrary code execution or a denial of service (application crash) via iTunes Store browsing related vectors. Root cause i...

CVE-2011-0137

CVE-2011-0137 affects WebKit as used in Apple iTunes before 10.2 on Windows. Vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a memory-corruption–driven denial of service via iTunes Store browsing vectors. Public references indicate Apple security updates HT456...

CVE-2011-0132

CVE-2011-0132 is a use-after-free vulnerability in WebKit's Runin box of the CSS 2.1 Visual Formatting Model, affecting WebKit builds used by Apple iTunes before 10.2 on Windows and Apple Safari . If exploited, it could allow a remote attacker to achieve arbitrary code execution or memory corrupt...

CVE-2011-0116

CVE-2011-0116 relates to a use-after-free in the WebKit htmlelement setOuterText method, used by Apple iTunes prior to 10.2 on Windows. The underlying issue is a use-after-free during DOM manipulations in the iTunes Store browsing flow, which can lead to arbitrary code execution or memory corrupt...