WebKit Vulnerability in Apple iTunes Affects Multiple Versions
CVE-2013-0992

Currently unrated

Key Information:

Vendor
Apple
Status
Itunes
Windows Xp
Vendor
CVE Published:
20 May 2013

Summary

A vulnerability in WebKit, utilized by Apple iTunes prior to version 11.0.3, exposes users to man-in-the-middle attacks. This flaw enables attackers to execute arbitrary code or induce a denial of service scenario through specific malicious interactions while browsing the iTunes Store. This vulnerability represents a distinct issue from other known vulnerabilities associated with WebKit, as identified in previous Apple security advisories.

References

http://support.apple.com/kb/HT5785
x_refsource_CONFIRM
http://secunia.com/advisories/54886
third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT5934
x_refsource_CONFIRM

EPSS Score

21% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.