WebKit in Apple Safari before 5.0 or iTunes before 9.2 on Windows, accesses uninitialized memory during a selection change on a form input element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.