CVE-2016-0187 | ByteOS Network

Vulnerability Details :

CVE-2016-0187

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-11 May, 2016 | 01:00

Updated At-05 Aug, 2024 | 22:08

The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0189.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:11 May, 2016 | 01:00

Updated At:05 Aug, 2024 | 22:08

▼CVE Numbering Authority (CNA)

The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0189.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securityfocus.com/bid/90011	vdb-entry x_refsource_BID
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051	vendor-advisory x_refsource_MS
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053	vendor-advisory x_refsource_MS
http://www.securitytracker.com/id/1035820	vdb-entry x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/90011

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: http://www.securitytracker.com/id/1035820

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/90011	vdb-entry x_refsource_BID x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051	vendor-advisory x_refsource_MS x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053	vendor-advisory x_refsource_MS x_transferred
http://www.securitytracker.com/id/1035820	vdb-entry x_refsource_SECTRACK x_transferred

Hyperlink: http://www.securityfocus.com/bid/90011

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: http://www.securitytracker.com/id/1035820

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

▼National Vulnerability Database (NVD)

Source:secure@microsoft.com

Published At:11 May, 2016 | 01:59

Updated At:12 Apr, 2025 | 10:46

The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0189.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	7.6	HIGH	AV:N/AC:H/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.6

Base severity: HIGH

Vector:

AV:N/AC:H/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/90011	secure@microsoft.com	N/A
http://www.securitytracker.com/id/1035820	secure@microsoft.com	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051	secure@microsoft.com	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053	secure@microsoft.com	N/A
http://www.securityfocus.com/bid/90011	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1035820	af854a3a-2127-422b-91ae-364da2661108	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051	af854a3a-2127-422b-91ae-364da2661108	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.securityfocus.com/bid/90011

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1035820

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/90011

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id/1035820

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2943Records found

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.5||HIGH

EPSS-20.81% / 95.39%

||

7 Day CHG~0.00%

Published-14 Oct, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.5||HIGH

EPSS-15.41% / 94.38%

||

7 Day CHG~0.00%

Published-14 Oct, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.5||HIGH

EPSS-77.91% / 98.97%

||

7 Day CHG~0.00%

Published-14 Oct, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3389, CVE-2016-7190, and CVE-2016-7194.

Vendor-n/a Microsoft Corporation

Product-edge n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.5||HIGH

EPSS-22.99% / 95.70%

||

7 Day CHG~0.00%

Published-14 Oct, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer edge n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-7.6||HIGH

EPSS-1.22% / 78.30%

||

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 webkit windows_xp windows_vista itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-7.6||HIGH

EPSS-1.20% / 78.06%

||

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 webkit windows_xp windows_vista itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-1.71% / 81.58%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-1.71% / 81.58%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to a "dangling pointer" and iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-1.39% / 79.62%

||

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.86% / 74.16%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.6||HIGH

EPSS-42.49% / 97.36%

||

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly parse FAX cover pages, which allows remote attackers to execute arbitrary code via a crafted .cov file, aka "Fax Cover Page Editor Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_7 windows_xp windows_server_2008 windows_server_2003 windows_2003_server windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.88% / 74.38%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-1.54% / 80.63%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 safari webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.94% / 75.28%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-0.86% / 74.16%

||

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows windows_7 webkit windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer