deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-2981
Published: 2012-09-11
Description: Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: http://americaninfosec.com/research/index.html; http://www.americaninfosec.com/research/dossiers/AISG-12-000.pdf; http://www.kb.cert.org/vuls/id/788478
CVE: CVE-2012-2982
Published: 2012-09-11
Description: file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
CVSS Score: 6.5 (MEDIUM)
References: http://americaninfosec.com/research/index.html; http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf; http://www.kb.cert.org/vuls/id/788478
CVE: CVE-2012-2983
Published: 2012-09-11
Description: file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://americaninfosec.com/research/index.html; http://www.americaninfosec.com/research/dossiers/AISG-12-002.pdf; http://www.kb.cert.org/vuls/id/788478
CVE: CVE-2012-3572
Published: 2012-09-11
Description: Open Source Competency Center (OSCC) MyMeeting 3.0.1 and earlier, and MyMesyuarat 09b-1, does not properly verify uploaded documents, which allows remote authenticated users to execute arbitrary PHP code via a crafted document.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: http://sourceforge.net/projects/mymesyuarat/files/mymesyuarat/mymesyuarat%20ver0.9b-2.zip/download; http://www.mycert.org.my/en/services/advisories/mycert/2012/main/detail/904/index.html; http://sourceforge.net/projects/mymesyuarat/files/mymesyuarat/mymesyuarat%20ver0.9b-2.zip/download
CVE: CVE-2012-4893
Published: 2012-09-11
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for requests that (1) read files or execute (2) tar, (3) zip, or (4) gzip commands, a different issue than CVE-2012-2982.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://americaninfosec.com/research/index.html; http://www.americaninfosec.com/research/dossiers/AISG-12-001.pdf; http://www.kb.cert.org/vuls/id/788478
CVE: CVE-2012-2048
Published: 2012-09-12
Description: Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/85317; http://secunia.com/advisories/50523; http://www.adobe.com/support/security/bulletins/apsb12-21.html
CVE: CVE-2012-2407
Published: 2012-09-12
Description: Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted AAC file that is not properly handled during stream-data unpacking.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/09072012_player/en/; https://exchange.xforce.ibmcloud.com/vulnerabilities/78384; http://service.real.com/realplayer/security/09072012_player/en/
CVE: CVE-2012-2408
Published: 2012-09-12
Description: The AAC SDK in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted AAC file that is not properly handled during decoding.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://service.real.com/realplayer/security/09072012_player/en/; https://exchange.xforce.ibmcloud.com/vulnerabilities/78385; http://service.real.com/realplayer/security/09072012_player/en/
CVE: CVE-2012-2409
Published: 2012-09-12
Description: Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2410.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/09072012_player/en/; https://exchange.xforce.ibmcloud.com/vulnerabilities/78386; http://service.real.com/realplayer/security/09072012_player/en/
CVE: CVE-2012-2410
Published: 2012-09-12
Description: Buffer overflow in RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted RealMedia file, a different vulnerability than CVE-2012-2409.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://service.real.com/realplayer/security/09072012_player/en/; https://exchange.xforce.ibmcloud.com/vulnerabilities/78387; http://service.real.com/realplayer/security/09072012_player/en/
CVE: CVE-2012-3234
Published: 2012-09-12
Description: RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://service.real.com/realplayer/security/09072012_player/en/; https://exchange.xforce.ibmcloud.com/vulnerabilities/78388; http://service.real.com/realplayer/security/09072012_player/en/
CVE: CVE-2012-3935
Published: 2012-09-12
Description: Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://osvdb.org/85421; http://secunia.com/advisories/50562; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp
CVE: CVE-2012-4629
Published: 2012-09-12
Description: The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service (disk consumption and application hang) via unspecified IPv4 packets that trigger log entries, aka Bug ID CSCub70603.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-asacx; http://www.securityfocus.com/bid/55515; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-asacx
CVE: CVE-2012-3598
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3601
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3602
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3606
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html
CVE: CVE-2012-3607
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html
CVE: CVE-2012-3612
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3613
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3614
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3616
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://osvdb.org/85409
CVE: CVE-2012-3617
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3621
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html
CVE: CVE-2012-3622
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://osvdb.org/85396
CVE: CVE-2012-3623
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://osvdb.org/85397
CVE: CVE-2012-3624
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3632
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html
CVE: CVE-2012-3643
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://osvdb.org/85400
CVE: CVE-2012-3647
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3648
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3649
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://osvdb.org/85403
CVE: CVE-2012-3651
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3652
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3654
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://osvdb.org/85415
CVE: CVE-2012-3657
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://osvdb.org/85416
CVE: CVE-2012-3658
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3659
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3660
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3671
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3672
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3673
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
CVE: CVE-2012-3675
Published: 2012-09-13
Description: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
CVSS Score: 6.8 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html; http://osvdb.org/85373