Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Webkit字体字型布局远程代码执行漏洞
Vulnerability Description
WebKit是KDE、苹果（Apple）、谷歌（Google）等公司共同开发的一套开源Web浏览器引擎，目前被Apple Safari及Google Chrome等浏览器使用。 Apple的iPhone Webkit库在实现上存在漏洞，远程攻击者可利用此漏洞在安装有影响系统中执行任意代码。此漏洞源于应用程序处理某些情况下的浮动块的方式，在执行伪元素生成的浮动块的布局操作时，应用程序将试图访问没有完全分配给字型数据哈希图的字型数据。因为此类型不完整，可导致任意代码的执行。
CVSS Information
N/A
Vulnerability Type
N/A