CVE-2013-1010

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.

• CWE-399

• http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
• http://lists.apple.com/archives/security-announce/2013/May/msg00000.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
• http://secunia.com/advisories/54886Vendor Advisory
• http://support.apple.com/kb/HT5766Vendor Advisory
• http://support.apple.com/kb/HT5785
• http://support.apple.com/kb/HT5934
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17123
• http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
• http://lists.apple.com/archives/security-announce/2013/May/msg00000.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
• http://secunia.com/advisories/54886Vendor Advisory
• http://support.apple.com/kb/HT5766Vendor Advisory
• http://support.apple.com/kb/HT5785
• http://support.apple.com/kb/HT5934
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17123

Published

May 20, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-10072Nagios XI versions prior to 2012R1.6 contain an authorizatio…6.5
• CVE-2013-10073Nagios XI versions prior to 2012R1.6 contain a shell command…8.8
• CVE-2013-10074Nagios XI versions prior to 2012R2.6 are vulnerable to cross…5.4
• CVE-2013-10075Apache::Session versions through 1.94 for Perl re-creates de…9.1
• CVE-2013-1008WebKit, as used in Apple iTunes before 11.0.3, allows man-in…
• CVE-2013-1009WebKit, as used in Apple Safari before 6.0.5, allows remote …
• CVE-2013-1011WebKit, as used in Apple iTunes before 11.0.3, allows man-in…
• CVE-2013-1012Cross-site scripting (XSS) vulnerability in WebKit in Apple …
• CVE-2013-1013XSS Auditor in WebKit in Apple Safari before 6.0.5 does not …
• CVE-2013-1014Apple iTunes before 11.0.3 does not properly verify X.509 ce…
• CVE-2013-1015Apple QuickTime before 7.7.4 allows remote attackers to exec…
• CVE-2013-1016Buffer overflow in Apple QuickTime before 7.7.4 allows remot…