CVE-2012-3675 Information

Description

WebKit as used in Apple iTunes before 10.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

Reference

http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html http://osvdb.org/85373 http://support.apple.com/kb/HT5485 http://support.apple.com/kb/HT5502 http://www.securityfocus.com/bid/55534 https://exchange.xforce.ibmcloud.com/vulnerabilities/78551 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A17144