CVE-2012-0605 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted w...
HighCVSS 9.3
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | < 5.1 | 5.1 |
| apple itunes | < 10.6 | 10.6 |
References
- APPLE-SA-2012-03-07-1 mailing-list vendor-advisory
- APPLE-SA-2012-03-07-2 mailing-list vendor-advisory
- APPLE-SA-2012-03-12-1 mailing-list vendor-advisory
- 79927 broken-link vdb-entry
- 48274 third-party-advisory
- 48288 third-party-advisory
- 48377 third-party-advisory
- 52365 third-party-advisory vdb-entry
- 1026774 third-party-advisory vdb-entry
- apple-webkit-cve20120605-code-execution(73824) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:17060 signature third-party-advisory vdb-entry