cbcvebase.
CVE-2011-0259
published 2011-10-12

CVE-2011-0259: CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute…

PriorityP433high7.6CVSS 2.0
AVNACHAuNCCICAC
EPSS
2.58%
83.6th percentile
CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

Affected

70 ranges· showing 25
VendorProductVersion rangeFixed in
appleitunes<= 10.4.1—
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
appleitunes——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.