WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

The version of Apple Safari installed on the remote Mac OS X host is earlier than 6.0.1.  It is, therefore, potentially affected by several issues :

  - A logic error in Safari's handling of the Quarantine     attribute caused the safe mode not to be triggered on     Quarantined files, which could lead to the disclosure     of local file contents. (CVE-2012-3713)

  - A rare condition in the handling of Form Autofill could     lead to the disclosure of information from the Address     Book 'Me' card that was not included in the Autofill     popover. (CVE-2012-3714)

  - A logic issue in the handling of HTTPS URLs in the     address bar when pasting text could result in the     request being sent over HTTP. (CVE-2012-3715)

  - Numerous issues exist in WebKit. (CVE-2011-3105 /     CVE-2012-2817 / CVE-2012-2818 / CVE-2012-2829 /     CVE-2012-2831 / CVE-2012-2842 / CVE-2012-2843 /     CVE-2012-3598 / CVE-2012-3601 / CVE-2012-3602 /     CVE-2012-3606 / CVE-2012-3607 / CVE-2012-3612 /     CVE-2012-3613 / CVE-2012-3614 / CVE-2012-3616 /     CVE-2012-3617 / CVE-2012-3621 / CVE-2012-3622 /     CVE-2012-3623 / CVE-2012-3624 / CVE-2012-3632 /     CVE-2012-3643 / CVE-2012-3647 / CVE-2012-3648 /     CVE-2012-3649 / CVE-2012-3651 / CVE-2012-3652 /     CVE-2012-3654 / CVE-2012-3657 / CVE-2012-3658 /     CVE-2012-3659 / CVE-2012-3660 / CVE-2012-3671 /     CVE-2012-3672 / CVE-2012-3673 / CVE-2012-3675 /     CVE-2012-3676 / CVE-2012-3677 / CVE-2012-3684 /     CVE-2012-3685 / CVE-2012-3687 / CVE-2012-3688 /     CVE-2012-3692 / CVE-2012-3699 / CVE-2012-3700 /     CVE-2012-3701 / CVE-2012-3702 / CVE-2012-3703 /     CVE-2012-3704 / CVE-2012-3705 / CVE-2012-3706 /     CVE-2012-3707 / CVE-2012-3708 / CVE-2012-3709 /     CVE-2012-3710 / CVE-2012-3711 / CVE-2012-3712)

The remote host has iTunes installed, a popular media player for Windows and Mac OS. 

Versions of iTunes earlier than 10.7 are reportedly affected by multiple memory corruption vulnerabilities in WebKit.

The version of Apple iTunes on the remote host is prior to version 10.7. It is, therefore, affected by multiple memory corruption vulnerabilities in the WebKit component.

The version of Apple iTunes installed on the remote Windows host is older than 10.7 and is, therefore, affected by multiple memory corruption vulnerabilities in WebKit.

ID	Name	Product	Family	Severity
62216	Mac OS X : Apple Safari < 6.0.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
6575	iTunes < 10.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
62078	Apple iTunes < 10.7 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	critical
62077	Apple iTunes < 10.7 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	critical

Detections

Analytics

CVE-2012-3712

high

Tenable Plugins

high

high

critical

critical