{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-06-16T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-18T12:57:01.000Z", "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple"}, "references": [{"name": "MDVSA-2011:039", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/kb/HT4220"}, {"name": "ADV-2010-2722", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/2722"}, {"name": "43068", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/43068"}, {"name": "USN-1006-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/USN-1006-1"}, {"name": "41856", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/41856"}, {"name": "ADV-2011-0212", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2011/0212"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/kb/HT4225"}, {"name": "40196", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/40196"}, {"name": "APPLE-SA-2010-06-16-1", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html"}, {"name": "SUSE-SR:2011:002", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"}, {"name": "42314", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/42314"}, {"name": "ADV-2010-1512", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/1512"}, {"name": "itunes-webkit-unspecified-var1(59506)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59506"}, {"name": "oval:org.mitre.oval:def:7061", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7061"}, {"name": "ADV-2011-0552", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2011/0552"}, {"name": "41016", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/41016"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/kb/HT4456"}, {"name": "APPLE-SA-2010-06-21-1", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"}, {"name": "1024108", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1024108"}, {"name": "APPLE-SA-2010-11-22-1", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "product-security@apple.com", "ID": "CVE-2010-1387", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "MDVSA-2011:039", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039"}, {"name": "http://support.apple.com/kb/HT4220", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT4220"}, {"name": "ADV-2010-2722", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/2722"}, {"name": "43068", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/43068"}, {"name": "USN-1006-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-1006-1"}, {"name": "41856", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/41856"}, {"name": "ADV-2011-0212", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2011/0212"}, {"name": "http://support.apple.com/kb/HT4225", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT4225"}, {"name": "40196", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/40196"}, {"name": "APPLE-SA-2010-06-16-1", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html"}, {"name": "SUSE-SR:2011:002", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"}, {"name": "42314", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/42314"}, {"name": "ADV-2010-1512", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/1512"}, {"name": "itunes-webkit-unspecified-var1(59506)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59506"}, {"name": "oval:org.mitre.oval:def:7061", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7061"}, {"name": "ADV-2011-0552", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2011/0552"}, {"name": "41016", "refsource": "BID", "url": "http://www.securityfocus.com/bid/41016"}, {"name": "http://support.apple.com/kb/HT4456", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT4456"}, {"name": "APPLE-SA-2010-06-21-1", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"}, {"name": "1024108", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1024108"}, {"name": "APPLE-SA-2010-11-22-1", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T01:21:19.034Z"}, "title": "CVE Program Container", "references": [{"name": "MDVSA-2011:039", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.apple.com/kb/HT4220"}, {"name": "ADV-2010-2722", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/2722"}, {"name": "43068", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/43068"}, {"name": "USN-1006-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/USN-1006-1"}, {"name": "41856", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/41856"}, {"name": "ADV-2011-0212", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2011/0212"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.apple.com/kb/HT4225"}, {"name": "40196", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/40196"}, {"name": "APPLE-SA-2010-06-16-1", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html"}, {"name": "SUSE-SR:2011:002", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"}, {"name": "42314", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/42314"}, {"name": "ADV-2010-1512", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/1512"}, {"name": "itunes-webkit-unspecified-var1(59506)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59506"}, {"name": "oval:org.mitre.oval:def:7061", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7061"}, {"name": "ADV-2011-0552", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2011/0552"}, {"name": "41016", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/41016"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.apple.com/kb/HT4456"}, {"name": "APPLE-SA-2010-06-21-1", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"}, {"name": "1024108", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1024108"}, {"name": "APPLE-SA-2010-11-22-1", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html"}]}]}, "cveMetadata": {"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "assignerShortName": "apple", "cveId": "CVE-2010-1387", "datePublished": "2010-06-18T16:00:00.000Z", "dateReserved": "2010-04-15T00:00:00.000Z", "dateUpdated": "2024-08-07T01:21:19.034Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*", "matchCriteriaId": "D019CFEE-6A1D-4276-B4D8-7C620808920C", "versionEndIncluding": "9.0.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "5CBD58D1-C40D-4F6D-816F-A3842897EB05", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "3C910CA4-5EA5-4507-BDE9-3E6C1434B666", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "0415D4B8-0281-4ED5-B3A1-A97BDD0F8D36", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "B1B4195D-1550-42D1-B562-0E438F7ACC2E", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*", "matchCriteriaId": "C4B6A66A-AC5F-48E0-ABCE-68828207B106", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "1206A192-A22C-4C55-A323-1D28D89BED21", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*", "matchCriteriaId": "071BFB1F-402B-4D8C-8155-671792AEDB81", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "52E156DE-12B4-4E7A-B8C4-C2FC0AC2B2C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*", "matchCriteriaId": "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "93748DFC-6003-4BED-87F9-98713F6897EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "2A8873F1-4792-41A1-83B5-B85C9F4A7D56", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "DB84AFE4-2694-475A-80D3-4D50C524EE18", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "BB20AA2E-5DF0-420C-A1FE-BB6EBA9649FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "B48FDD0A-6DE5-44DD-B144-32B91DB26C7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "8343D87F-FA37-4225-B27D-BCCDD2433C31", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "B591AE1E-02DB-462A-B71F-48947525D232", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "34B5892B-0377-4D81-9E0E-94B8D8CE72C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "2276BED4-82F0-4F62-AA6F-7E1667F28E3A", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "45D47548-1C4D-4368-99D1-929905DD6B3A", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "28AE8D2D-63CA-4091-9D59-CE919EB1FD75", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "52A433A5-3EFF-405D-8285-97EC88857968", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "582D1FE8-C4E8-4385-B4EB-34320F019E43", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "AF61CE34-5130-4B1A-B7A2-B28C1A18B9BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "6FEE6DEC-9B26-47F4-A2CF-CA49981C8864", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "2223B8E2-346A-4C37-9F6C-879F9CA64C06", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "93E5227C-0621-43EE-A0F2-4B4545D71852", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "DB69B123-7A09-4855-9846-E8ACACB3C6F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "C0CC53F2-3827-4CA3-8726-C481B57B4AB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "7C1AFF8F-BBCA-4C93-A401-F8B478327BFE", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "0BA3571F-9221-45CD-9798-CC72CA428D6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*", "matchCriteriaId": "129ABCA4-FBF6-41B8-BF6B-65467D56D297", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "017E5A35-D778-46FD-A536-E57A13162675", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "6122C685-4F02-476F-9A41-9C62D3D92651", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "17D37426-00A0-40E5-A27A-CF31D8CBAEEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "3E11CADC-AFCC-4A98-9271-C35BC9752B40", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*", "matchCriteriaId": "11F1530E-9E63-4A39-9056-3A946A34B650", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "3856A348-A0D6-4A0A-A8C9-D369CC863A97", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*", "matchCriteriaId": "29E92D8D-68AB-4FC4-A37A-D6D48829B58D", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "670656BF-2BE2-41ED-854A-466DC4068FBF", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "FDE7F79F-54F5-4315-98BD-414CA2D1C51E", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "DBBF2E9F-0F37-4DDA-9704-B31D94745257", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*", "matchCriteriaId": "BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "1143A4DE-F75B-4396-9D01-CE14EF8FCB39", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "BDF87AB4-B3F3-4774-8CE3-A2B46C3D8DC5", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A02D076B-5900-401D-9B47-5136B9CEAA15", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "7E479501-8832-41B0-A63C-360AE5A1B420", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:8.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "F8961EDA-B567-4D92-8DBC-F887712F3BD2", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "A60A3349-DE6E-4381-81C0-E682B791ED61", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:8.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "6EF2759C-6F94-4769-8EB2-16947C05CBB3", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "B0F53FF4-8A15-475C-9FF6-54073A3F1B08", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:8.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "80AFD7E5-A66F-4E43-BC34-EB6BF59186D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:9.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "E41B2E2A-CE22-49FD-9558-0E6C87F53425", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:9.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "A1950796-DA96-4443-85F4-91FE38A26612", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:9.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "E5EBED9A-DCF4-47FE-9A6D-4573594AA645", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "2DA4557D-2368-4497-B40C-222D27FDFA1C", "versionEndIncluding": "3.2.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "E28FB0CB-D636-4F85-B5F7-70EC30053925", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "27319629-171F-42AA-A95F-2D71F78097D0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "297F9438-0F04-4128-94A8-A504B600929E", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "F8618621-F871-4531-9F6C-7D60F2BF8B75", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "824DED2D-FA1D-46FC-8252-6E25546DAE29", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "1641DDFA-3BF1-467F-8EC3-98114FF9F07B", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "DF40CDA4-4716-4815-9ED0-093FE266734C", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "3D06D54D-97FD-49FD-B251-CC86FBA68CA6", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "25A5D868-0016-44AB-80E6-E5DF91F15455", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*", "matchCriteriaId": "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "863383DA-0BC6-4A96-835A-A96128EC0202", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "51D3BE2B-5A01-4AD4-A436-0056B50A535D", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "9A20F171-79FE-43B9-8309-B18341639FA1", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "126EF22D-29BC-4366-97BC-B261311E6251", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "3B3DD7B3-DA4C-4B0A-A94E-6BF66B358B7D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:apple:ipod_touch:*:*:*:*:*:*:*:*", "matchCriteriaId": "88FA2602-DDAB-4E23-A3D2-FB712970AAD1", "vulnerable": false}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "340C4071-1447-477F-942A-8E09EA29F917", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769."}, {"lang": "es", "value": "Vulnerabilidad no espec\u00edficada en WebKit en Apple iTunes anteriores a v9.2 en Windows, tiene un impacto y vectores de ataque desconocidos, es una vulnerabilidad diferente a CVE-2010-1387 y CVE-2010-1769."}], "id": "CVE-2010-1387", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2010-06-18T16:30:01.390", "references": [{"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"}, {"source": "product-security@apple.com", "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/40196"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/41856"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/42314"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/43068"}, {"source": "product-security@apple.com", "url": "http://securitytracker.com/id?1024108"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://support.apple.com/kb/HT4220"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://support.apple.com/kb/HT4225"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://support.apple.com/kb/HT4456"}, {"source": "product-security@apple.com", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039"}, {"source": "product-security@apple.com", "url": "http://www.securityfocus.com/bid/41016"}, {"source": "product-security@apple.com", "url": "http://www.ubuntu.com/usn/USN-1006-1"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/1512"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/2722"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/0212"}, {"source": "product-security@apple.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/0552"}, {"source": "product-security@apple.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59506"}, {"source": "product-security@apple.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7061"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/40196"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/41856"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/42314"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/43068"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1024108"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://support.apple.com/kb/HT4220"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://support.apple.com/kb/HT4225"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://support.apple.com/kb/HT4456"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/41016"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/USN-1006-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/1512"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2010/2722"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/0212"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/0552"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59506"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7061"}], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"acknowledgement": "Red Hat would like to thank Drew Yao (Apple Product Security) for reporting this issue.", "bugzilla": {"description": "WebKit: use-after-free vulnerability in JavaScriptCore during page transitions", "id": "596493", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=596493"}, "csaw": false, "cwe": "CWE-416", "details": ["Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769."], "name": "CVE-2010-1387", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "qt", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "webkitgtk", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2010-06-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2010-1387\nhttps://nvd.nist.gov/vuln/detail/CVE-2010-1387"], "threat_severity": "Critical"}

{}