NVD

Id
7241  
Name
CVE-2011-0115  
Description
The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-03-03  
Modified Date
2011-03-17  
Seq
2011-0115  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
40780 7241 CVE-2011-0115 APPLE-SA-2011-03-09-1  View
40781 7241 CVE-2011-0115 APPLE-SA-2011-03-09-2  View
40782 7241 CVE-2011-0115 APPLE-SA-2011-03-02-1  View
40783 7241 CVE-2011-0115 http://support.apple.com/kb/HT4554  View
40784 7241 CVE-2011-0115 http://support.apple.com/kb/HT4564  View
40785 7241 CVE-2011-0115 http://support.apple.com/kb/HT4566  View
40786 7241 CVE-2011-0115 http://www.zerodayinitiative.com/advisories/ZDI-11-096  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31065 JVNDB-2011-001304 複数の Apple 製品の WebKit における任意のコードを実行される脆弱性 複数の Apple 製品の WebKit 内にある DOM level 2 実装は、範囲オブジェクトの処理中に、イベントリスナに関連付けられた DOM の操作を適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-0115 48022 CVE-2011-0115 7241 7.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001304.html 2011-03-03 2011-03-29 View