CVE Database
/

CVE-2010-1387

Back to search

CVE-2010-1387

Published: Jun 18, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769.

VendorProductVersions

n/a

n/a

affected
n/a

References

MDVSA-2011:039
vendor-advisory
x_refsource_MANDRIVA
ADV-2010-2722
vdb-entry
x_refsource_VUPEN
43068
third-party-advisory
x_refsource_SECUNIA
USN-1006-1
vendor-advisory
x_refsource_UBUNTU
41856
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0212
vdb-entry
x_refsource_VUPEN
40196
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2010-06-16-1
vendor-advisory
x_refsource_APPLE
SUSE-SR:2011:002
vendor-advisory
x_refsource_SUSE
42314
third-party-advisory
x_refsource_SECUNIA
ADV-2010-1512
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:7061
vdb-entry
signature
x_refsource_OVAL
ADV-2011-0552
vdb-entry
x_refsource_VUPEN
41016
vdb-entry
x_refsource_BID
APPLE-SA-2010-06-21-1
vendor-advisory
x_refsource_APPLE
1024108
vdb-entry
x_refsource_SECTRACK
APPLE-SA-2010-11-22-1
vendor-advisory
x_refsource_APPLE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now