CVE-2011-0259

CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute…

published October 12, 2011

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02577 · 85.0th percentile
Published
2011-10-12T18:00Z
EPSS history
Timeline
  • 12 OCT 18:00Z
    CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute…
    cvelistv5