← Database

CVE-2010-1387

CRITICAL CVSS: 9.3 Published: 2010-06-18 Modified: 2026-06-16

Description

Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769.

Affected Platforms

Apple ItunesMicrosoft WindowsApple Iphone OsApple Ipod Touch

Weakness Type

CWE-399

References