CVE-2011-2338 in Safari

Sumário (Inglês)

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

02/06/2011

Divulgação

12/10/2011

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
4427	Apple Safari Excesso de tampão	119	Não definido	Correção oficial	CVE-2011-2338

Fontes

• MITRE
• NVD
• CVE Details