CVE-2011-0146

CVE-2011-0146 affects WebKit as used in Apple iTunes for Windows prior to 10.2. It enables a man-in-the-middle attacker to cause arbitrary code execution or a denial of service (memory corruption and app crash) via iTunes Store browsing-related vectors. The description indicates memory corruption...

CVE-2011-0111

CVE-2011-0111 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows a man-in-the-middle to cause memory corruption, enabling arbitrary code execution or a denial of service (application crash) via vectors related to iTunes Store browsing. The provided documents i...

CVE-2011-0122

CVE-2011-0122 affects WebKit used by Apple iTunes on Windows prior to version 10.2. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service via iTunes Store browsing-related vectors. Root cause: memory corruption/unsafe handling in WebKit when ...

CVE-2011-0131

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0165

CVE-2011-0165 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability arises from WebKit-related processing during iTunes Store browsing, leading to memory corruption that can allow arbitrary code execution or a denial of service. The open-source/embedded WebKit component...

CVE-2011-0142

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0143

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0122

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0148

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0168

CVE-2011-0168 is a WebKit-based vulnerability affecting Apple WebKit as used by iTunes on Windows prior to iTunes 10.2. The description in the initial doc states that WebKit in this context allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service via iTunes Store ...

CVE-2011-0115

CVE-2011-0115 concerns the WebKit DOM Level 2 implementation as used by Apple Safari and iTunes before 10.2 on Windows. The vulnerability stems from improper handling of DOM manipulations tied to event listeners while processing range objects, enabling a remote attacker to trigger arbitrary code ...

CVE-2011-0150

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0125

CVE-2011-0125 affects WebKit as used in Apple iTunes before 10.2 on Windows. The underlying flaw is a memory corruption issue in WebKit triggered during iTunes Store/browsing flows, which can allow a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (application cr...

CVE-2011-0118

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0192

Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF Internet Fax image file tha...

CVE-2011-0138

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0136

CVE-2011-0136 affects WebKit as used in Apple iTunes prior to 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to trigger memory corruption that can lead to arbitrary code execution or a denial of service (application crash) via vectors related to iTunes Store browsing. The i...

CVE-2011-0120

CVE-2011-0120 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing. The description indicate...

CVE-2011-0131

CVE-2011-0131 affects WebKit as used by Apple iTunes on Windows prior to 10.2. The vulnerability stems from WebKit handling related to iTunes Store browsing, enabling a man‑in‑the‑middle attacker to run arbitrary code or cause a memory‑related crash/DoS. Impact is described as arbitrary code exec...

CVE-2011-0128

Technical details of CVE-2011-0128 are not publicly provided in the supplied documents. No explicit affected product versions or fixes are confirmed here. Monitor for updates from vendor/security advisories; current sources reference WebKit/iTunes exposure but lack concrete specifics.