CVE-2011-1117

ÉLEVÉE 7.5CVE-2011-1117 · Published 01/03/2011 · updated 16/06/2026

En bref

CVE-2011-1117 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant itunes (apple), safari (apple), chrome (google).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.0%, plus élevée que 80.6% des vulnérabilités.
Correctif : mettre à jour vers 10.5, 5.0.6, 9.0.597.107 ou plus récent.

Package	Affected versions	Patched versions
itunes apple	`< 10.5`	`10.5`
safari apple	`< 5.0.6`	`5.0.6`
chrome google	`< 9.0.597.107`	`9.0.597.107`

Description

Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale nodes."

References

code.google.com/p/chromium/issues/detail · Exploit
googlechromereleases.blogspot.com/2011/02/stable-channel-update_28.html · Vendor Advisory
lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html · Mailing List
lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html · Mailing List
lists.apple.com/archives/security-announce/2011//Jul/msg00002.html · Mailing List
support.apple.com/kb/HT4808 · Third Party Advisory
support.apple.com/kb/HT4981 · Third Party Advisory
support.apple.com/kb/HT4999 · Third Party Advisory
securityfocus.com/bid/46614 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/65735 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14487 · Third Party Advisory

Autres vulnérabilités de itunes

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free