Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to a "dangling pointer" and iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Webkit HTML元素样式远程代码执行漏洞
Vulnerability Description
WebKit是KDE、苹果(Apple)、谷歌(Google)等公司共同开发的一套开源Web浏览器引擎,目前被Apple Safari及Google Chrome等浏览器使用。 Apple的iPhone Webkit库在实现上存在漏洞,远程攻击者可利用此漏洞在安装有影响系统中执行任意代码。此漏洞源于应用程序解析特制HTML文件的方式,在解析定义了文档名称空间的特定元素时,该库将调用一个相同的但没有映射的悬空指针,由于没有映射,如果攻击者加载了该地址处的代码,可导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A