Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Webkit Runin框提升远程代码执行漏洞
Vulnerability Description
WebKit是KDE、苹果(Apple)、谷歌(Google)等公司共同开发的一套开源Web浏览器引擎,目前被Apple Safari及Google Chrome等浏览器使用。 Apple的iPhone Webkit库在实现上存在漏洞,远程攻击者可利用此漏洞在安装有影响系统中执行任意代码。此漏洞源于Webkit库实现CSS 2.1规范中列出的Visual Formatting Model中的Runin框需要的请求方式。在提升run-in元素时,应用程序将错误的释放其中一个run-in子元素。在尝试为此元素
CVSS Information
N/A
Vulnerability Type
N/A