CVE

Id
48028  
CVE No.
CVE-2011-0116  
Status
Candidate  
Description
Use-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to DOM manipulations during iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
522345 48028 CVE-2011-0116 MISC:http://www.zerodayinitiative.com/advisories/ZDI-11-097  View
522346 48028 CVE-2011-0116 CONFIRM:http://support.apple.com/kb/HT4554  View
522347 48028 CVE-2011-0116 CONFIRM:http://support.apple.com/kb/HT4564  View
522348 48028 CVE-2011-0116 CONFIRM:http://support.apple.com/kb/HT4566  View
522349 48028 CVE-2011-0116 APPLE:APPLE-SA-2011-03-02-1  View
522350 48028 CVE-2011-0116 URL:http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html  View
522351 48028 CVE-2011-0116 APPLE:APPLE-SA-2011-03-09-1  View
522352 48028 CVE-2011-0116 URL:http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html  View
522353 48028 CVE-2011-0116 APPLE:APPLE-SA-2011-03-09-2  View
522354 48028 CVE-2011-0116 URL:http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html  View
522355 48028 CVE-2011-0116 OVAL:oval:org.mitre.oval:def:17220  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31071 JVNDB-2011-001310 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 複数の Apple 製品の WebKit には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-0121 48028 7.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001310.html  View