CVSS: 7.6EPSS: 0%CPEs: 73EXPL: 0CVE-2011-0141
https://notcve.org/view.php?id=CVE-2011-0141
03 Mar 2011 — WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. WebKit, tal como se utiliza en el iTunes de Apple antes de v10.2 para Windows, permite a los atacantes "man-in-the-middle" ejecutar código de su elección o causar una denegación de servicio (corrupción d... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.6EPSS: 0%CPEs: 73EXPL: 0CVE-2011-0123
https://notcve.org/view.php?id=CVE-2011-0123
03 Mar 2011 — WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. WebKit, tal como se utiliza en el iTunes de Apple antes de v10.2 para Windows, permite a los atacantes "man-in-the-middle" ejecutar código de su elección o causar una denegación de servicio (corrupción d... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.6EPSS: 0%CPEs: 73EXPL: 0CVE-2011-0168
https://notcve.org/view.php?id=CVE-2011-0168
03 Mar 2011 — WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. WebKit,tal como se utiliza en el iTunes de Apple antes de v10.2 en Windows, permite a los atacantes "man-in-the-middle" ejecutar código de su elección o causar una denegación de servicio (corrupción de m... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 2%CPEs: 72EXPL: 0CVE-2011-0170
https://notcve.org/view.php?id=CVE-2011-0170
03 Mar 2011 — Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image. Desbordamiento de búfer en memoria dinámica en ImageIO en CoreGraphics en iTunes de Apple antes de v10.2 en Windows permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (bloqueo de aplicación) a través ... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=897 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.6EPSS: 0%CPEs: 73EXPL: 0CVE-2011-0139
https://notcve.org/view.php?id=CVE-2011-0139
03 Mar 2011 — WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. WebKit, tal como se utiliza en el iTunes de Apple antes de v10.2 para Windows, permite a los atacantes "man-in-the-middle" ejecutar código de su elección o causar una denegación de servicio (corrupción d... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.6EPSS: 0%CPEs: 73EXPL: 0CVE-2011-0124
https://notcve.org/view.php?id=CVE-2011-0124
03 Mar 2011 — WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. WebKit, tal como se utiliza en el iTunes de Apple antes de v10.2 para Windows, permite a los atacantes "man-in-the-middle" ejecutar código de su elección o causar una denegación de servicio (corrupción d... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.6EPSS: 0%CPEs: 73EXPL: 0CVE-2011-0148
https://notcve.org/view.php?id=CVE-2011-0148
03 Mar 2011 — WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. WebKit, tal como se utiliza en el iTunes de Apple antes de v10.2 para Windows, permite a los atacantes "man-in-the-middle" ejecutar código de su elección o causar una denegación de servicio (corrupción d... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.6EPSS: 0%CPEs: 73EXPL: 0CVE-2011-0147
https://notcve.org/view.php?id=CVE-2011-0147
03 Mar 2011 — WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. WebKit, tal como se utiliza en el iTunes de Apple antes de v10.2 para Windows, permite a los atacantes "man-in-the-middle" ejecutar código de su elección o causar una denegación de servicio (corrupción d... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.0EPSS: 1%CPEs: 73EXPL: 0CVE-2011-0116 – Apple Webkit setOuterText Memory Corruption Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0116
02 Mar 2011 — Use-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to DOM manipulations during iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. Vulnerabilidad usar después de usar (use-after-free) en el método setOuterText en la librerí... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-399: Resource Management Errors •
CVSS: 9.0EPSS: 2%CPEs: 3EXPL: 0CVE-2011-0154 – Apple iPhone Webkit Library Javascript Array sort Method Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0154
02 Mar 2011 — WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort function for JavaScript arrays, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1. WebKit, tal como se utiliza en el iTunes de Apple antes de v10.2 para Windows y Apple OS, no implementa correctam... • http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •