CVE-2011-0132
Estado: ModificadaAlta (7.6)—
Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
- Puntuación base: 7.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.18%
- Percentil entre todas las CVEs puntuadas: 88
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-399
Referencias
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
- http://support.apple.com/kb/HT4554
- http://support.apple.com/kb/HT4564
- http://support.apple.com/kb/HT4566
- http://www.zerodayinitiative.com/advisories/ZDI-11-098
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
- http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html
- http://support.apple.com/kb/HT4554
- http://support.apple.com/kb/HT4564
- http://support.apple.com/kb/HT4566
- http://www.zerodayinitiative.com/advisories/ZDI-11-098
JSON original (NVD)
Mostrar
{
"id": "CVE-2011-0132",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "HIGH",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "product-security@apple.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-03-03T20:00:01.973",
"references": [
{
"url": "http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html",
"source": "product-security@apple.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html",
"source": "product-security@apple.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "http://support.apple.com/kb/HT4554",
"tags": [
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "http://support.apple.com/kb/HT4564",
"source": "product-security@apple.com"
},
{
"url": "http://support.apple.com/kb/HT4566",
"source": "product-security@apple.com"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-098",
"source": "product-security@apple.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT4554",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT4564",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT4566",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-098",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1."
},
{
"lang": "es",
"value": "Vulnerabilidad de uso después de liberación en la funcionalidad \"Runin box\" en las Hojas de Estilo en Cascada (CSS) v2.1 en la implementación de Visual Formatting Model en WebKit, tal como se utiliza en el iTunes de Apple antes de v10.2 para Windows, permite a los atacantes \"man-in-the-middle\" ejecutar código de su elección o causar una denegación de servicio (corrupción de memoria y caída de la aplicación)a través de vectores relacionados con la navegación de la tienda iTunes, una vulnerabilidad diferente a los CVE listados en APPLE-SA-2011-03-02-1."
}
],
"lastModified": "2026-06-16T23:26:51.757",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E40F7857-8F3F-4707-B3AA-A12C0731BB83",
"versionEndIncluding": "10.1.2"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CBD58D1-C40D-4F6D-816F-A3842897EB05"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C910CA4-5EA5-4507-BDE9-3E6C1434B666"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0415D4B8-0281-4ED5-B3A1-A97BDD0F8D36"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1B4195D-1550-42D1-B562-0E438F7ACC2E"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4B6A66A-AC5F-48E0-ABCE-68828207B106"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1206A192-A22C-4C55-A323-1D28D89BED21"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "071BFB1F-402B-4D8C-8155-671792AEDB81"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52E156DE-12B4-4E7A-B8C4-C2FC0AC2B2C9"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCBA60E9-C5B5-4B4C-9FA3-7FE0F3F6871C"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93748DFC-6003-4BED-87F9-98713F6897EE"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFB9D7E1-B715-4A93-9CDB-99A89C7D85B1"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A8873F1-4792-41A1-83B5-B85C9F4A7D56"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB84AFE4-2694-475A-80D3-4D50C524EE18"
},
{
"criteria": "cpe:2.3:a:apple:itunes:4.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB20AA2E-5DF0-420C-A1FE-BB6EBA9649FE"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B48FDD0A-6DE5-44DD-B144-32B91DB26C7E"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8343D87F-FA37-4225-B27D-BCCDD2433C31"
},
{
"criteria": "cpe:2.3:a:apple:itunes:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B591AE1E-02DB-462A-B71F-48947525D232"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34B5892B-0377-4D81-9E0E-94B8D8CE72C3"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2276BED4-82F0-4F62-AA6F-7E1667F28E3A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45D47548-1C4D-4368-99D1-929905DD6B3A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28AE8D2D-63CA-4091-9D59-CE919EB1FD75"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC9E22D2-551A-4CDF-B9F0-C45A3A2B7695"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52A433A5-3EFF-405D-8285-97EC88857968"
},
{
"criteria": "cpe:2.3:a:apple:itunes:6.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D62A1C5D-C25E-4E56-8FD0-F90C8E39C7F4"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "582D1FE8-C4E8-4385-B4EB-34320F019E43"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF61CE34-5130-4B1A-B7A2-B28C1A18B9BA"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FEE6DEC-9B26-47F4-A2CF-CA49981C8864"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2223B8E2-346A-4C37-9F6C-879F9CA64C06"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93E5227C-0621-43EE-A0F2-4B4545D71852"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB69B123-7A09-4855-9846-E8ACACB3C6F6"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0CC53F2-3827-4CA3-8726-C481B57B4AB2"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C1AFF8F-BBCA-4C93-A401-F8B478327BFE"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BA3571F-9221-45CD-9798-CC72CA428D6A"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "129ABCA4-FBF6-41B8-BF6B-65467D56D297"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "017E5A35-D778-46FD-A536-E57A13162675"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6122C685-4F02-476F-9A41-9C62D3D92651"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17D37426-00A0-40E5-A27A-CF31D8CBAEEF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E11CADC-AFCC-4A98-9271-C35BC9752B40"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11F1530E-9E63-4A39-9056-3A946A34B650"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3856A348-A0D6-4A0A-A8C9-D369CC863A97"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29E92D8D-68AB-4FC4-A37A-D6D48829B58D"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "670656BF-2BE2-41ED-854A-466DC4068FBF"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDE7F79F-54F5-4315-98BD-414CA2D1C51E"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBBF2E9F-0F37-4DDA-9704-B31D94745257"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBA5AB05-ADF6-4B5D-A4FD-9C149EC4577F"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1143A4DE-F75B-4396-9D01-CE14EF8FCB39"
},
{
"criteria": "cpe:2.3:a:apple:itunes:7.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDF87AB4-B3F3-4774-8CE3-A2B46C3D8DC5"
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A02D076B-5900-401D-9B47-5136B9CEAA15"
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E479501-8832-41B0-A63C-360AE5A1B420"
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8961EDA-B567-4D92-8DBC-F887712F3BD2"
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A60A3349-DE6E-4381-81C0-E682B791ED61"
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EF2759C-6F94-4769-8EB2-16947C05CBB3"
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0F53FF4-8A15-475C-9FF6-54073A3F1B08"
},
{
"criteria": "cpe:2.3:a:apple:itunes:8.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80AFD7E5-A66F-4E43-BC34-EB6BF59186D7"
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E41B2E2A-CE22-49FD-9558-0E6C87F53425"
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1950796-DA96-4443-85F4-91FE38A26612"
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5EBED9A-DCF4-47FE-9A6D-4573594AA645"
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F7EA3F3-576C-4661-B35F-EC34CE363125"
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C3A6055-2626-4A6E-9596-9974E7437FB5"
},
{
"criteria": "cpe:2.3:a:apple:itunes:9.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00AF4F28-A71C-4CB3-8F5F-C15500332954"
},
{
"criteria": "cpe:2.3:a:apple:itunes:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5817849-ADD0-4905-87D5-4D61DB635747"
},
{
"criteria": "cpe:2.3:a:apple:itunes:10.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96E90253-3F7D-4361-819B-5D49657F4472"
},
{
"criteria": "cpe:2.3:a:apple:itunes:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84336EBA-5EC0-4C49-B1B9-9DAB23D5C3C2"
},
{
"criteria": "cpe:2.3:a:apple:itunes:10.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CDE68E5-744B-4E18-BB74-83D7185E6A57"
},
{
"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE370CAA-04B3-434E-BD5B-1D87DE596C10"
},
{
"criteria": "cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "461EFB63-7933-488C-BB4E-7C913364F5A9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C162FFF0-1E8F-4DCF-A08F-6C6E324ED878"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0A0D2704-C058-420B-B368-372D1129E914"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9B339C33-8896-4896-88FF-88E74FDBC543"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CE477A73-4EE4-41E9-8694-5A3D5DC88656"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "product-security@apple.com"
}