Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

iOS 5.0 and iTunes 10.5 allow web page takeover

CVE-2012-0635 · published 14 years ago
Summary

Devices running iOS versions earlier than 5.1 and computers with iTunes versions earlier than 10.6 can be tricked by a specially crafted web page to run unwanted code or crash the application. This could let an attacker take control of the device or make it unusable. Update iOS and iTunes to the latest releases, and avoid visiting untrusted web sites.

What to do
  • Update apple iphone_os to version 5.1 or later.
  • Update apple itunes to version 10.6 or later.
Affected software
VendorProductAffected versions
apple iphone_os < 5.1
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple itunes < 10.6
cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
Original advisory text
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafte...
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
4% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published8 Mar 2012
Updated23 Oct 2026
First seen29 Sep 2026
Sources
CVE-2012-0635 · NVD
Track software like this
Free during beta