Vulnerabilities > Microsoft > Windows XP

DATE CVE VULNERABILITY TITLE RISK
2013-05-24 CVE-2013-0986 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple mac OS X and Quicktime
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file.
network
apple microsoft CWE-119
critical
9.3
2013-05-20 CVE-2013-1014 Improper Input Validation vulnerability in Apple Itunes
Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.
4.3
2013-05-20 CVE-2013-1011 Resource Management Errors vulnerability in Apple Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
6.8
2013-05-20 CVE-2013-1010 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1008 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1007 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1006 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1005 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1004 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1003 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3