Vulnerabilities > Apple > Itunes > 10.6

DATE CVE VULNERABILITY TITLE RISK
2012-09-13 CVE-2012-3607 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple CWE-119
critical
9.3
2012-09-13 CVE-2012-3606 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple CWE-119
critical
9.3
2012-09-13 CVE-2012-3602 Memory Corruption vulnerability in WebKit
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple
6.8
2012-09-13 CVE-2012-3601 Memory Corruption vulnerability in WebKit
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple
6.8
2012-09-13 CVE-2012-3598 Unspecified vulnerability in Apple Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple
6.8
2012-06-12 CVE-2012-0677 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Itunes
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.
network
apple CWE-119
critical
9.3
2012-05-01 CVE-2012-1521 USE After Free vulnerability in Google Chrome
Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
network
google apple CWE-416
6.8
2012-05-01 CVE-2011-3081 USE After Free vulnerability in Google Chrome
Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.
network
google apple CWE-416
critical
9.3
2012-05-01 CVE-2011-3078 USE After Free vulnerability in Google Chrome
Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.
network
google apple CWE-416
6.8
2012-04-05 CVE-2011-3076 USE After Free vulnerability in Google Chrome
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.
network
google apple CWE-416
6.8