) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/a:apple:itunes:7.0.2
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2012-3601 |
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1. Published: September 13, 2012; 6:30:19 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2012-3598 |
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1. Published: September 13, 2012; 6:30:18 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2012-0677 |
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist. Published: June 12, 2012; 10:55:01 AM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2012-1521 |
Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Published: May 01, 2012; 6:12:04 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3081 |
Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078. Published: May 01, 2012; 6:12:04 AM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2011-3078 |
Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081. Published: May 01, 2012; 6:12:04 AM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3076 |
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling. Published: April 05, 2012; 6:02:08 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3075 |
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands. Published: April 05, 2012; 6:02:07 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3074 |
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media. Published: April 05, 2012; 6:02:07 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3073 |
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources. Published: April 05, 2012; 6:02:07 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3071 |
Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. Published: April 05, 2012; 6:02:07 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3069 |
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes. Published: April 05, 2012; 6:02:07 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3068 |
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes. Published: April 05, 2012; 6:02:07 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3064 |
Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping. Published: March 30, 2012; 6:55:01 PM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
| CVE-2011-3060 |
Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Published: March 30, 2012; 6:55:01 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3059 |
Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Published: March 30, 2012; 6:55:01 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3053 |
Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting. Published: March 22, 2012; 12:55:01 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2011-3050 |
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element. Published: March 22, 2012; 12:55:01 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2012-0648 |
WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1. Published: March 08, 2012; 5:55:04 PM -0500 |
V3.x:(not available) V2.0: 7.6 HIGH |
| CVE-2012-0639 |
WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1. Published: March 08, 2012; 5:55:04 PM -0500 |
V3.x:(not available) V2.0: 7.6 HIGH |