CVE-2011-0164

CVE-2011-0164 affects WebKit as used by Apple iTunes before version 10.2 on Windows. The vulnerability stems from memory corruption in WebKit related to iTunes Store browsing, allowing a MITM attacker to cause an arbitrary code execution or a denial of service (application crash). The description...

CVE-2011-0134

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0129

The CVE-2011-0129 entry affects WebKit as used by Apple iTunes before version 10.2 on Windows. The vulnerability arises in WebKit and can be triggered via iTunes Store browsing, enabling memory corruption that may lead to arbitrary code execution or a denial of service (application crash). The de...

CVE-2011-0156

Technical details about CVE-2011-0156 are not publicly provided in the connected documents. The initial description notes WebKit/iTunes Store browsing vectors, but there are no explicit affected versions, root cause analysis, or fixes in the supplied sources. Monitor for updates.

CVE-2011-0118

CVE-2011-0118 involves WebKit as used in Apple iTunes before 10.2 on Windows. The issue allows MITM attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, per the description. The root cause is memor...

CVE-2011-0127

CVE-2011-0127 : The vulnerability concerns WebKit as used in Apple iTunes on Windows before version 10.2. The issue arises via iTunes Store browsing, enabling man-in-the-middle attackers to trigger arbitrary code execution or cause a denial of service through memory corruption and application cra...

CVE-2011-0143

The CVE-2011-0143 issue affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability stems from WebKit-related browsing vectors in iTunes Store access, enabling a man-in-the-middle attacker to execute arbitrary code or cause a denial of service via memory corruption and applic...

CVE-2011-0113

CVE-2011-0113 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows a man-in-the-middle attacker to cause memory corruption and application crash or to execute arbitrary code via vectors related to iTunes Store browsing. This is the vulnerability described for We...

CVE-2011-0145

CVE-2011-0145 affects WebKit as used by Apple iTunes before 10.2 on Windows. It allows a man-in-the-middle to cause memory corruption and application crash or execute arbitrary code via iTunes Store browsing. Root cause and specific exploit vectors are described as tied to WebKit memory handling ...

CVE-2011-0191

CVE-2011-0191 is a buffer overflow in LibTIFF 3.9.4 (and possibly other versions) exploited via a crafted TIFF image with JPEG encoding, affecting ImageIO in Apple iTunes before 10.2 and related products, potentially enabling remote code execution or a denial of service. Connected advisories (SUS...

CVE-2011-0141

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0170

CVE-2011-0170 : The vulnerability is an ImageIO/CoreGraphics heap buffer overflow in Apple’s iTunes stack (Mac OS X component) triggered by a crafted ICC profile in a JPEG image. Public docs in connected sources confirm ImageIO-related heap overflow issues affecting Mac OS X components (Apple iTu...

CVE-2011-0139

CVE-2011-0139 is described in the provided records as a WebKit-based vulnerability in Apple iTunes before 10.2 on Windows, allowing a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing vectors. The ...

CVE-2011-0127

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0152

CVE-2011-0152 concerns WebKit in Apple iTunes for Windows prior to version 10.2. Exploitation via iTunes Store browsing could allow MITM attackers to execute arbitrary code or cause a denial of service through memory corruption and application crashes. The vulnerability involves WebKit components...

CVE-2011-0191

Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with JPEG encoding...

CVE-2011-0192

Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF Internet Fax image file tha...

CVE-2011-0142

CVE-2011-0142 affects WebKit as used in Apple iTunes before 10.2 on Windows. It enables MITM attackers to execute arbitrary code or trigger a denial of service (memory corruption and app crash) via iTunes Store browsing vectors. Connected documents corroborate WebKit/iTunes-related exposure but d...

Apple Fixes Nearly 60 Bugs With iTunes 10.2 Release

Apple has released a new version of its ubiquitous iTunes software that includes fixes for nearly 60 vulnerabilities, including several bugs that could be used to run remote code on vulnerable machines. Most of the vulnerabilities that Apple fixed with the release of iTunes 10.2 lie in the open...

libtiff: buffer overflow in Fax4Decode

Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF Internet Fax image file tha...