CVE-2012-0617 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted w...
HighCVSS 9.3
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple itunes | < 10.6 | 10.6 |
| apple iphone os | <= 5.1 | No fix listed |
References
- APPLE-SA-2012-03-07-1 mailing-list vendor-advisory
- APPLE-SA-2012-03-07-2 mailing-list vendor-advisory
- APPLE-SA-2012-03-12-1 mailing-list vendor-advisory
- 79939 broken-link vdb-entry
- 48274 third-party-advisory
- 48288 third-party-advisory
- 48377 third-party-advisory
- 52365 third-party-advisory vdb-entry
- 1026774 third-party-advisory vdb-entry
- apple-webkit-cve20120617-code-execution(73836) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:17048 signature third-party-advisory vdb-entry