[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-3658Date: (C)2012-09-13   (M)2023-12-22


WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
BID-55534
APPLE-SA-2012-09-12-1
APPLE-SA-2012-09-19-1
APPLE-SA-2012-09-19-3
apple-itunes-webkit-cve20123658(78544)
http://support.apple.com/kb/HT5485
http://support.apple.com/kb/HT5502
http://support.apple.com/kb/HT5503
oval:org.mitre.oval:def:17467

CPE    133
cpe:/a:apple:itunes:5.0.1
cpe:/a:apple:itunes:10.4.0.80
cpe:/a:apple:itunes:7.4.2:-:windows
cpe:/a:apple:itunes:7.6.2:-:windows
...
OVAL    4
oval:org.secpod.oval:def:7239
oval:org.secpod.oval:def:7284
oval:org.secpod.oval:def:7757
oval:org.secpod.oval:def:7784
...

© SecPod Technologies