CVE-2011-0133

2011-03-0300:00:00

ubuntu.com

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.7%

JSON

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly
access glyph data during layout actions for floating blocks associated with
pseudo-elements, which allows man-in-the-middle attackers to execute
arbitrary code or cause a denial of service (memory corruption and
application crash) via vectors related to iTunes Store browsing, a
different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.