PT-2011-2122

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

PT-2011-2147

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

PT-2011-2125

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

PT-2011-2152

Name of the Vulnerable Software and Affected Versions Apple iTunes versions prior to 10.2 on Windows Description A heap-based buffer overflow issue exists in the ImageIO component of CoreGraphics in Apple iTunes, allowing remote attackers to execute arbitrary code or cause a denial of service via...

PT-2011-2105

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

PT-2011-2118

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

PT-2011-2172

Name of the Vulnerable Software and Affected Versions LibTIFF version 3.9.4 ImageIO in Apple iTunes versions prior to 10.2 on Windows Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted TIFF image with JPEG encoding. This is a result ...

CVE-2011-0147: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0148: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...

Apple Releases iTunes 10.2

Apple has released iTunes 10.2 to address multiple vulnerabilities affecting the ImageIO, libxml, and WebKit packages. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to revie...

PT-2011-2104

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

CVE-2011-0129: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

PT-2011-2128

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

PT-2011-2108

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

PT-2011-2119

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

PT-2011-2146

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...

CVE-2011-0132: Undefined Security Weakness

Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets CSS 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

CVE-2011-0111: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

PT-2011-2103

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 10.2 on Windows Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vector...