CVE Published: 12/10/2011 |
CVE Updated: 06/08/2024 |
CVE Year: 2011 Source: apple |
Vendor: n/a |
Product: n/a Status : PUBLISHED
CVE-2011-0259 Description
CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.