6.8

CVE-2013-0992

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iTunes Version <= 11.0.2
Apple ≫ iTunes Version 4.0.0
Apple ≫ iTunes Version 4.0.1
Apple ≫ iTunes Version 4.1.0
Apple ≫ iTunes Version 4.2.0
Apple ≫ iTunes Version 4.5
Apple ≫ iTunes Version 4.5.0
Apple ≫ iTunes Version 4.6
Apple ≫ iTunes Version 4.6.0
Apple ≫ iTunes Version 4.7
Apple ≫ iTunes Version 4.7.0
Apple ≫ iTunes Version 4.7.1
Apple ≫ iTunes Version 4.7.2
Apple ≫ iTunes Version 4.8.0
Apple ≫ iTunes Version 4.9.0
Apple ≫ iTunes Version 5.0
Apple ≫ iTunes Version 5.0.0
Apple ≫ iTunes Version 5.0.1
Apple ≫ iTunes Version 6.0.0
Apple ≫ iTunes Version 6.0.1
Apple ≫ iTunes Version 6.0.2
Apple ≫ iTunes Version 6.0.3
Apple ≫ iTunes Version 6.0.4
Apple ≫ iTunes Version 6.0.5
Apple ≫ iTunes Version 7.0.0
Apple ≫ iTunes Version 7.0.1
Apple ≫ iTunes Version 7.0.2
Apple ≫ iTunes Version 7.1.0
Apple ≫ iTunes Version 7.1.1
Apple ≫ iTunes Version 7.2.0
Apple ≫ iTunes Version 7.3.0
Apple ≫ iTunes Version 7.3.1
Apple ≫ iTunes Version 7.3.2
Apple ≫ iTunes Version 7.4
Apple ≫ iTunes Version 7.4.0
Apple ≫ iTunes Version 7.4.1
Apple ≫ iTunes Version 7.4.2
Apple ≫ iTunes Version 7.4.3
Apple ≫ iTunes Version 7.5
Apple ≫ iTunes Version 7.5.0
Apple ≫ iTunes Version 7.6
Apple ≫ iTunes Version 7.6.0
Apple ≫ iTunes Version 7.6.1
Apple ≫ iTunes Version 7.6.2
Apple ≫ iTunes Version 7.7
Apple ≫ iTunes Version 7.7.0
Apple ≫ iTunes Version 7.7.1
Apple ≫ iTunes Version 8.0.0
Apple ≫ iTunes Version 8.0.1
Apple ≫ iTunes Version 9.0.0
Apple ≫ iTunes Version 9.0.1
Apple ≫ iTunes Version 9.0.2
Apple ≫ iTunes Version 9.0.3
Apple ≫ iTunes Version 9.1
Apple ≫ iTunes Version 9.1.1
Apple ≫ iTunes Version 9.2
Apple ≫ iTunes Version 9.2.1
Apple ≫ iTunes Version 10.0
Apple ≫ iTunes Version 10.0.1
Apple ≫ iTunes Version 10.1
Apple ≫ iTunes Version 10.1.1
Apple ≫ iTunes Version 10.1.1.4
Apple ≫ iTunes Version 10.1.2
Apple ≫ iTunes Version 10.2
Apple ≫ iTunes Version 10.2.2.12
Apple ≫ iTunes Version 10.3
Apple ≫ iTunes Version 10.3.1
Apple ≫ iTunes Version 10.4
Apple ≫ iTunes Version 10.4.0.80
Apple ≫ iTunes Version 10.4.1
Apple ≫ iTunes Version 10.4.1.10
Apple ≫ iTunes Version 10.5
Apple ≫ iTunes Version 10.5.1
Apple ≫ iTunes Version 10.5.1.42
Apple ≫ iTunes Version 10.5.2
Apple ≫ iTunes Version 10.5.3
Apple ≫ iTunes Version 10.6
Apple ≫ iTunes Version 10.6.1
Apple ≫ iTunes Version 10.6.3
Microsoft ≫ Windows Xp Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.16% 0.947
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
http://secunia.com/advisories/54886
http://support.apple.com/kb/HT5934
http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
http://support.apple.com/kb/HT5785
http://lists.apple.com/archives/security-announce/2013/May/msg00000.html
Vendor Advisory
http://support.apple.com/kb/HT5766
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17621