CVE-2011-0133

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with…

published March 3, 2011

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03181 · 88.0th percentile
Published
2011-03-03T19:00Z
EPSS history
Timeline
  • 03 MAR 19:00Z
    WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with…
    cvelistv5