CVE

Id
48044  
CVE No.
CVE-2011-0132  
Status
Candidate  
Description
Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
522506 48044 CVE-2011-0132 MISC:http://www.zerodayinitiative.com/advisories/ZDI-11-098  View
522507 48044 CVE-2011-0132 CONFIRM:http://support.apple.com/kb/HT4554  View
522508 48044 CVE-2011-0132 CONFIRM:http://support.apple.com/kb/HT4564  View
522509 48044 CVE-2011-0132 CONFIRM:http://support.apple.com/kb/HT4566  View
522510 48044 CVE-2011-0132 APPLE:APPLE-SA-2011-03-02-1  View
522511 48044 CVE-2011-0132 URL:http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html  View
522512 48044 CVE-2011-0132 APPLE:APPLE-SA-2011-03-09-1  View
522513 48044 CVE-2011-0132 URL:http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html  View
522514 48044 CVE-2011-0132 APPLE:APPLE-SA-2011-03-09-2  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31088 JVNDB-2011-001327 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 複数の Apple 製品の WebKit には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-0137 48044 7.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001327.html  View