CVSS: 6.8EPSS: 0%CPEs: 82EXPL: 0CVE-2013-0996
https://notcve.org/view.php?id=CVE-2013-0996
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1. WebKit, usado en Apple iTunes anterior a 11.0.3, permite a atacantes man-in-the-middle la ejecución de código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de vectores relacionados con la navegación en la iTunes Store. Vulnerabilidad distinta de otros CVEs listados en APPLE-SA-2013-05-16-1. • http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html http://lists.apple.com/archives/security-announce/2013/May/msg00000.html http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html http://secunia.com/advisories/54886 http://support.apple.com/kb/HT5766 http://support.apple.com/kb/HT5785 http://support.apple.com/kb/HT5934 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17298 • CWE-399: Resource Management Errors •
CVSS: 9.3EPSS: 1%CPEs: 136EXPL: 0CVE-2012-3687
https://notcve.org/view.php?id=CVE-2012-3687
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1. WebKit, como se utiliza en Apple iTunes anterior a v10.7, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web diseñado, una vulnerabilidad diferente a otros WebKit CVE listados en APPLE-SA-2012-09-12-1. • http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html http://support.apple.com/kb/HT5485 http://support.apple.com/kb/HT5502 http://support.apple.com/kb/HT5642 http://www.securityfocus.com/bid/55534 https://exchange.xforce.ibmcloud.com/vulnerabilities/78529 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg. • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 8%CPEs: 133EXPL: 0CVE-2012-3613
https://notcve.org/view.php?id=CVE-2012-3613
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1. WebKit, como se utiliza en Apple iTunes anterior a v10.7, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web diseñado, una vulnerabilidad diferente a otros WebKit CVE listados en APPLE-SA-2012-09-12-1. • http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html http://osvdb.org/85407 http://support.apple.com/kb/HT5485 http://support.apple.com/kb/HT5502 http://support.apple.com/kb/HT5503 http://www.securityfocus.com/bid/55534 https://exchange.xforce.ibmcloud.com/vulnerabilities/78523 https://oval.cisecurity.org/repository&# •
CVSS: 6.8EPSS: 8%CPEs: 133EXPL: 0CVE-2012-3601
https://notcve.org/view.php?id=CVE-2012-3601
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1. WebKit, como se utiliza en Apple iTunes anterior a v10.7, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web diseñado, una vulnerabilidad diferente a otros WebKit CVE listados en APPLE-SA-2012-09-12-1. • http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html http://osvdb.org/85413 http://support.apple.com/kb/HT5485 http://support.apple.com/kb/HT5502 http://support.apple.com/kb/HT5503 http://www.securityfocus.com/bid/55534 https://exchange.xforce.ibmcloud.com/vulnerabilities/78527 https://oval.cisecurity.org/repository&# •
CVSS: 9.3EPSS: 0%CPEs: 136EXPL: 0CVE-2012-3701
https://notcve.org/view.php?id=CVE-2012-3701
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1. WebKit, como se utiliza en Apple iTunes anterior a v10.7, permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria y caída de la aplicación) a través de un sitio web diseñado, una vulnerabilidad diferente a otros WebKit CVE listados en APPLE-SA-2012-09-12-1. • http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html http://support.apple.com/kb/HT5485 http://support.apple.com/kb/HT5502 http://support.apple.com/kb/HT5642 http://www.securityfocus.com/bid/55534 https://exchange.xforce.ibmcloud.com/vulnerabilities/78514 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg. • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •