CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2011-10-12 11:55
Updated : 2017-09-18 18:31
NVD link : CVE-2011-0259
Mitre link : CVE-2011-0259
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
microsoft
- windows_xp
- windows_7
- windows_vista
apple
- itunes