CVE-2011-0149

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows…

published March 3, 2011

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to a "dangling pointer" and iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03181 · 87.9th percentile
Published
2011-03-03T19:00Z
EPSS history
Timeline
  • 03 MAR 19:00Z
    WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows…
    cvelistv5