PT-2012-2708

CVE-2012-0600

Publicado

2012-03-08

Atualizado

2018-11-29

Descrição por

CVSS 2.0

9.3

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iOS versions prior to 5.1 WebKit, as used in Apple iTunes versions prior to 10.6

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

Recommendations For Apple iOS versions prior to 5.1, update to version 5.1 or later. For Apple iTunes versions prior to 10.6, update to version 10.6 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer