deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-0054
Published: 2011-03-02
Description: Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving non-local JavaScript variables, aka an "upvarMap" issue.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://downloads.avaya.com/css/P8/documents/100133195; http://www.mandriva.com/security/advisories?name=MDVSA-2011:041; http://www.mozilla.org/security/announce/2011/mfsa2011-04.html
CVE: CVE-2011-0055
Published: 2011-03-02
Description: Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to the js_HasOwnProperty function and garbage collection.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://downloads.avaya.com/css/P8/documents/100133195; http://www.mandriva.com/security/advisories?name=MDVSA-2011:041; http://www.mozilla.org/security/announce/2011/mfsa2011-03.html
CVE: CVE-2011-0056
Published: 2011-03-02
Description: Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via vectors involving exception timing and a large number of string values, aka an "atom map" issue.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://downloads.avaya.com/css/P8/documents/100133195; http://www.mandriva.com/security/advisories?name=MDVSA-2011:041; http://www.mozilla.org/security/announce/2011/mfsa2011-05.html
CVE: CVE-2011-0057
Published: 2011-03-02
Description: Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://downloads.avaya.com/css/P8/documents/100133195; http://www.mandriva.com/security/advisories?name=MDVSA-2011:041; http://www.mozilla.org/security/announce/2011/mfsa2011-06.html
CVE: CVE-2011-0058
Published: 2011-03-02
Description: Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers construction of a long text run.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://downloads.avaya.com/css/P8/documents/100133195; http://www.mandriva.com/security/advisories?name=MDVSA-2011:041; http://www.mozilla.org/security/announce/2011/mfsa2011-07.html
CVE: CVE-2011-0059
Published: 2011-03-02
Description: Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a different web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://downloads.avaya.com/css/P8/documents/100133195; http://support.avaya.com/css/P8/documents/100128655; http://www.mandriva.com/security/advisories?name=MDVSA-2011:041
CVE: CVE-2011-0061
Published: 2011-03-02
Description: Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://downloads.avaya.com/css/P8/documents/100133195; http://www.mandriva.com/security/advisories?name=MDVSA-2011:041; http://www.mandriva.com/security/advisories?name=MDVSA-2011:042
CVE: CVE-2011-0062
Published: 2011-03-02
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://downloads.avaya.com/css/P8/documents/100133195; http://www.mandriva.com/security/advisories?name=MDVSA-2011:041; http://www.mandriva.com/security/advisories?name=MDVSA-2011:042
CVE: CVE-2011-0762
Published: 2011-03-02
Description: The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-400
References: ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.3.4/Changelog; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622741; http://cxib.net/stuff/vspoc232.c
CVE: CVE-2011-1004
Published: 2011-03-02
Description: The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-59
References: http://lists.apple.com/archives/security-announce/2012/May/msg00001.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054422.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054436.html
CVE: CVE-2011-1005
Published: 2011-03-02
Description: The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2012/May/msg00001.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054422.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054436.html
CVE: CVE-2011-0455
Published: 2011-03-03
Description: Cross-site scripting (XSS) vulnerability in Things BBS before 2.0.3 and BBS Thread before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN20982938/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2011-000015; http://secunia.com/advisories/43524
CVE: CVE-2011-0713
Published: 2011-03-03
Description: Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long record in a Nokia DCT3 trace file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://anonsvn.wireshark.org/viewvc?view=rev&revision=35953; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html
CVE: CVE-2011-1072
Published: 2011-03-03
Description: The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164; http://news.php.net/php.pear.cvs/61264; http://openwall.com/lists/oss-security/2011/02/28/12
CVE: CVE-2011-1138
Published: 2011-03-03
Description: Off-by-one error in the dissect_6lowpan_iphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote attackers to cause a denial of service (application crash) via a malformed 6LoWPAN IPv6 packet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-189
References: http://anonsvn.wireshark.org/viewvc?view=rev&revision=36036; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html
CVE: CVE-2011-1139
Published: 2011-03-03
Description: wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc?view=rev&revision=35855; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html
CVE: CVE-2011-1140
Published: 2011-03-03
Description: Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc?view=rev&revision=36029; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html
CVE: CVE-2011-1141
Published: 2011-03-03
Description: epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (memory consumption) via (1) a long LDAP filter string or (2) an LDAP filter string containing many elements.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://anonsvn.wireshark.org/viewvc?view=rev&revision=36101; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055664.html
CVE: CVE-2011-1142
Published: 2011-03-03
Description: Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service (infinite loop) via vectors involving self-referential ASN.1 CHOICE values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: http://www.mandriva.com/security/advisories?name=MDVSA-2011:044; http://www.securitytracker.com/id?1025148; http://www.vupen.com/english/advisories/2011/0622
CVE: CVE-2011-1143
Published: 2011-03-03
Description: epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted .pcap file.
CVSS Score: 4.3 (MEDIUM)
References: http://anonsvn.wireshark.org/viewvc?view=rev&revision=34018; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055364.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055650.html
CVE: CVE-2011-1144
Published: 2011-03-03
Description: The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1072.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://openwall.com/lists/oss-security/2011/02/28/5; http://openwall.com/lists/oss-security/2011/03/01/4; http://openwall.com/lists/oss-security/2011/03/01/5
CVE: CVE-2011-0111
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0112
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0113
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0114
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0115
Published: 2011-03-03
Description: The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0116
Published: 2011-03-03
Description: Use-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to DOM manipulations during iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0117
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0118
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0119
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0120
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0121
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0122
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0123
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0124
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0125
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0126
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0127
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0128
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
CVE: CVE-2011-0129
Published: 2011-03-03
Description: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html; http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html