deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2341
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2352
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2354
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2356
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2809
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2811
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://support.apple.com/kb/HT4981
CVE: CVE-2011-2813
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2814
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2815
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76382
CVE: CVE-2011-2816
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2817
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2820
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-2831
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-3219
Published: 2011-10-12
Description: Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76374
CVE: CVE-2011-3233
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76383
CVE: CVE-2011-3235
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-3236
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-3237
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
CVE: CVE-2011-3238
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76384
CVE: CVE-2011-3239
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76386
CVE: CVE-2011-3241
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html; http://osvdb.org/76387
CVE: CVE-2011-3244
Published: 2011-10-12
Description: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html; http://osvdb.org/76352
CVE: CVE-2011-3252
Published: 2011-10-12
Description: Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Advanced Audio Coding (AAC) stream.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://osvdb.org/76381
CVE: CVE-2011-0185
Published: 2011-10-14
Description: Format string vulnerability in the debug-logging feature in Application Firewall in Apple Mac OS X before 10.7.2 allows local users to gain privileges via a crafted name of an executable file.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-134
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-0224
Published: 2011-10-14
Description: CoreMedia in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QuickTime movie file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-0229
Published: 2011-10-14
Description: Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-0230
Published: 2011-10-14
Description: Buffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-0231
Published: 2011-10-14
Description: CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-0260
Published: 2011-10-14
Description: The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystrokes in the locked-screen state, which might allow physically proximate attackers to bypass intended access restrictions by typing into this window.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-3212
Published: 2011-10-14
Description: CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://lists.apple.com/archives/security-announce/2012/May/msg00001.html; http://osvdb.org/76362
CVE: CVE-2011-3213
Published: 2011-10-14
Description: The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate for a subsequent connection.
CVSS Score: 7.6 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-3214
Published: 2011-10-14
Description: IOGraphics in Apple Mac OS X through 10.6.8 does not properly handle a locked-screen state in display sleep mode for an Apple Cinema Display, which allows physically proximate attackers to bypass the password requirement via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-3215
Published: 2011-10-14
Description: The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or (3) shutdown state.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-3216
Published: 2011-10-14
Description: The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allow local users to bypass intended permissions and delete files via an unlink system call.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-3217
Published: 2011-10-14
Description: MediaKit in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-3218
Published: 2011-10-14
Description: The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76373; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3220
Published: 2011-10-14
Description: QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76377; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3221
Published: 2011-10-14
Description: QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76378; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3222
Published: 2011-10-14
Description: Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76379; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3223
Published: 2011-10-14
Description: Buffer overflow in QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLIC movie file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76380; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3224
Published: 2011-10-14
Description: The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
CVSS Score: 2.6 (LOW)
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76375; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3225
Published: 2011-10-14
Description: The SMB File Server component in Apple Mac OS X 10.7 before 10.7.2 does not prevent all guest users from accessing the share point record of a guest-restricted folder, which allows remote attackers to bypass intended browsing restrictions by leveraging access to the nobody account.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76376; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3226
Published: 2011-10-14
Description: Open Directory in Apple Mac OS X 10.7 before 10.7.2, when an LDAPv3 server is used with RFC 2307 or custom mappings, allows remote attackers to bypass the password requirement by leveraging lack of an AuthenticationAuthority attribute for a user account.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76371; http://support.apple.com/kb/HT5002
CVE: CVE-2011-3227
Published: 2011-10-14
Description: libsecurity in Apple Mac OS X before 10.7.2 does not properly handle errors during processing of a nonstandard extension in a Certificate Revocation list (CRL), which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) a crafted (1) web site or (2) e-mail message.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://support.apple.com/kb/HT5002; http://www.securityfocus.com/bid/50085
CVE: CVE-2011-3228
Published: 2011-10-14
Description: QuickTime in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html; http://osvdb.org/76372; http://support.apple.com/kb/HT5002