Every CVE Search/ Get API key

CVE-2011-0133

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data...

7.6 High

CVE-2011-0133 is a high vulnerability (CVSS 7.6) in Apple Itunes, published March 3, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.18%, the 88th percentile. No source names a fixed version.

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Exploit likelihood

3.18%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.6

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Record
CVE-2011-0133
CVSS 2.0
7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Record
CVE-2011-0133
Updated
2026-11-02
EUVDEUVD-2011-0159 No score

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Record
EUVD-2011-0159
Updated
2026-11-03
GitHub AdvisoriesGHSA-ff6w-2rg8-rfh5 No score

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data...

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Record
GHSA-ff6w-2rg8-rfh5
Weakness
CWE-119
Updated
2026-11-02
OSVUBUNTU-CVE-2011-0133 No score

WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.

Record
UBUNTU-CVE-2011-0133
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qtwebkit-source
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.3.2-0ubuntu102.3.2-0ubuntu11
 None known

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 6 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open