Man-in-the-Middle Vulnerability in Apple iTunes WebKit
CVE-2011-2338

Currently unrated

Key Information:

Vendor

Apple
Status
Itunes
Webkit
Vendor
CVE Published:
12 October 2011

What is CVE-2011-2338?

An issue in WebKit used in Apple iTunes prior to version 10.5 introduces vulnerabilities that allow man-in-the-middle attackers to execute arbitrary code or induce a denial of service through memory corruption and application crashes during iTunes Store browsing. This poses significant risks, as attackers can exploit the weakness to manipulate user interactions or disrupt application functionality.

References

http://support.apple.com/kb/HT4981
x_refsource_CONFIRM
http://lists.apple.com/archives/Security-announce/2011//O...
vendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/Security-announce/2011//O...
vendor-advisoryx_refsource_APPLE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2011-2338 : Man-in-the-Middle Vulnerability in Apple iTunes WebKit