Description
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | qtwebkit-source | No fix yet | — |
References
- APPLE-SA-2012-09-19-3 vendor-advisory
- apple-itunes-webkit-cve20123602(78558) vdb-entry
- http://support.apple.com/kb/HT5485
- APPLE-SA-2012-09-19-1 vendor-advisory
- http://support.apple.com/kb/HT5503
- http://support.apple.com/kb/HT5502
- 55534 vdb-entry
- 85414 vdb-entry
- oval:org.mitre.oval:def:16532 vdb-entry signature
- APPLE-SA-2012-09-12-1 vendor-advisory