Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2813
HistoryOct 12, 2011 - 12:00 a.m.

CVE-2011-2813

2011-10-1200:00:00
ubuntu.com
ubuntu.com
4

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.0%

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle
attackers to execute arbitrary code or cause a denial of service (memory
corruption and application crash) via vectors related to iTunes Store
browsing, a different vulnerability than other CVEs listed in
APPLE-SA-2011-10-11-1.

Notes

Author Note
jdstrand qt4-x11 unmaintained upstream (see README.webkit for details)
sbeattie iTunes store specific?

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.0%