VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 3, 2011· Updated Apr 29, 2026

CVE-2011-0115

CVE-2011-0115

Description

The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Affected products

67
  • Apple Inc./iTunes65 versions
    cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*+ 64 more
    • cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*range: <=10.1.2
    • cpe:2.3:a:apple:itunes:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:10.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:10.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:8.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:8.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:9.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:9.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:9.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:9.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:9.2.1:*:*:*:*:*:*:*
  • Apple Inc./Safari
    cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
  • Apple Inc./Webkit
    cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.