CVE-2010-1387 : Detail

CVE-2010-1387

4.01%V3
Network
2010-06-18
14h00 +00:00
2017-09-18
10h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-399 Category : Resource Management Errors
Weaknesses in this category are related to improper management of system resources.

Metrics

Metrics Score Severity CVSS Vector Source
V2 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Apple>>Itunes >> Version To (including) 9.0.3

Apple>>Itunes >> Version 4.0.0

Apple>>Itunes >> Version 4.0.1

Apple>>Itunes >> Version 4.1.0

Apple>>Itunes >> Version 4.2.0

Apple>>Itunes >> Version 4.5

Apple>>Itunes >> Version 4.5.0

Apple>>Itunes >> Version 4.6

Apple>>Itunes >> Version 4.6.0

Apple>>Itunes >> Version 4.7

Apple>>Itunes >> Version 4.7.0

Apple>>Itunes >> Version 4.7.1

Apple>>Itunes >> Version 4.7.2

Apple>>Itunes >> Version 4.8.0

Apple>>Itunes >> Version 4.9.0

Apple>>Itunes >> Version 5.0

Apple>>Itunes >> Version 5.0.0

Apple>>Itunes >> Version 5.0.1

Apple>>Itunes >> Version 6.0.0

Apple>>Itunes >> Version 6.0.1

Apple>>Itunes >> Version 6.0.2

Apple>>Itunes >> Version 6.0.3

Apple>>Itunes >> Version 6.0.4

Apple>>Itunes >> Version 6.0.4.2

    Apple>>Itunes >> Version 6.0.5

    Apple>>Itunes >> Version 7.0.0

    Apple>>Itunes >> Version 7.0.1

    Apple>>Itunes >> Version 7.0.2

    Apple>>Itunes >> Version 7.1.0

    Apple>>Itunes >> Version 7.1.1

    Apple>>Itunes >> Version 7.2.0

    Apple>>Itunes >> Version 7.3.0

    Apple>>Itunes >> Version 7.3.1

    Apple>>Itunes >> Version 7.3.2

    Apple>>Itunes >> Version 7.4

    Apple>>Itunes >> Version 7.4.0

    Apple>>Itunes >> Version 7.4.1

    Apple>>Itunes >> Version 7.4.2

    Apple>>Itunes >> Version 7.4.3

    Apple>>Itunes >> Version 7.5

    Apple>>Itunes >> Version 7.5.0

    Apple>>Itunes >> Version 7.6

    Apple>>Itunes >> Version 7.6.0

    Apple>>Itunes >> Version 7.6.1

    Apple>>Itunes >> Version 7.6.2

    Apple>>Itunes >> Version 7.7

    Apple>>Itunes >> Version 7.7.0

    Apple>>Itunes >> Version 7.7.1

    Apple>>Itunes >> Version 8.0.0

    Apple>>Itunes >> Version 8.0.1

    Apple>>Itunes >> Version 8.0.2

      Apple>>Itunes >> Version 8.1

      Apple>>Itunes >> Version 8.1.1

        Apple>>Itunes >> Version 8.2

          Apple>>Itunes >> Version 8.2.1

            Apple>>Itunes >> Version 9.0.0

            Apple>>Itunes >> Version 9.0.1

            Apple>>Itunes >> Version 9.0.2

            Microsoft>>Windows >> Version *

            Configuraton 0

            Apple>>Iphone_os >> Version To (including) 3.2.1

            Apple>>Iphone_os >> Version 1.0.0

            Apple>>Iphone_os >> Version 1.0.1

            Apple>>Iphone_os >> Version 1.0.2

            Apple>>Iphone_os >> Version 1.1.0

            Apple>>Iphone_os >> Version 1.1.1

            Apple>>Iphone_os >> Version 1.1.2

            Apple>>Iphone_os >> Version 1.1.3

            Apple>>Iphone_os >> Version 1.1.4

            Apple>>Iphone_os >> Version 1.1.5

            Apple>>Iphone_os >> Version 2.0

            Apple>>Iphone_os >> Version 2.0.0

            Apple>>Iphone_os >> Version 2.0.1

            Apple>>Iphone_os >> Version 2.0.2

            Apple>>Iphone_os >> Version 2.1

            Apple>>Iphone_os >> Version 2.1.1

            Apple>>Iphone_os >> Version 2.2

            Apple>>Iphone_os >> Version 2.2.1

            Apple>>Iphone_os >> Version 3.0

            Apple>>Iphone_os >> Version 3.0.1

            Apple>>Iphone_os >> Version 3.1

            Apple>>Iphone_os >> Version 3.1.2

            Apple>>Iphone_os >> Version 3.1.3

            Apple>>Iphone_os >> Version 3.2

            Apple>>Ipod_touch >> Version *

            Apple>>Iphone_os >> Version *

            References

            http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
            Tags : vendor-advisory, x_refsource_MANDRIVA
            http://support.apple.com/kb/HT4220
            Tags : x_refsource_CONFIRM
            http://www.vupen.com/english/advisories/2010/2722
            Tags : vdb-entry, x_refsource_VUPEN
            http://secunia.com/advisories/43068
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://www.ubuntu.com/usn/USN-1006-1
            Tags : vendor-advisory, x_refsource_UBUNTU
            http://secunia.com/advisories/41856
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://www.vupen.com/english/advisories/2011/0212
            Tags : vdb-entry, x_refsource_VUPEN
            http://support.apple.com/kb/HT4225
            Tags : x_refsource_CONFIRM
            http://secunia.com/advisories/40196
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://secunia.com/advisories/42314
            Tags : third-party-advisory, x_refsource_SECUNIA
            http://www.vupen.com/english/advisories/2010/1512
            Tags : vdb-entry, x_refsource_VUPEN
            http://www.vupen.com/english/advisories/2011/0552
            Tags : vdb-entry, x_refsource_VUPEN
            http://www.securityfocus.com/bid/41016
            Tags : vdb-entry, x_refsource_BID
            http://support.apple.com/kb/HT4456
            Tags : x_refsource_CONFIRM
            http://securitytracker.com/id?1024108
            Tags : vdb-entry, x_refsource_SECTRACK