WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
Version | Base score | Base severity | Vector |
---|
Hyperlink | Resource Type |
---|
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
Type | CWE ID | Description |
---|---|---|
text | N/A | n/a |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Hyperlink | Resource |
---|---|
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17326 | vdb-entry signature x_refsource_OVAL |
http://www.securityfocus.com/bid/52365 | vdb-entry x_refsource_BID |
http://www.securitytracker.com/id?1026774 | vdb-entry x_refsource_SECTRACK |
http://secunia.com/advisories/48377 | third-party-advisory x_refsource_SECUNIA |
https://exchange.xforce.ibmcloud.com/vulnerabilities/73802 | vdb-entry x_refsource_XF |
http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html | vendor-advisory x_refsource_APPLE |
http://secunia.com/advisories/48274 | third-party-advisory x_refsource_SECUNIA |
http://osvdb.org/79912 | vdb-entry x_refsource_OSVDB |
http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html | vendor-advisory x_refsource_APPLE |
http://secunia.com/advisories/48288 | third-party-advisory x_refsource_SECUNIA |
http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html | vendor-advisory x_refsource_APPLE |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
Date Added | Due Date | Vulnerability Name | Required Action |
---|---|---|---|
N/A |
Type | Version | Base score | Base severity | Vector |
---|---|---|---|---|
Primary | 2.0 | 9.3 | HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |