# CVEs published 2011-03-03

62 CVEs were published on March 3, 2011: 0 critical, 1 high. Days are UTC.

- [CVE-2011-0111](https://cve.now/CVE-2011-0111.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0112](https://cve.now/CVE-2011-0112.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0113](https://cve.now/CVE-2011-0113.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0114](https://cve.now/CVE-2011-0114.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0115](https://cve.now/CVE-2011-0115.md): The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM mani (no CVSS)
- [CVE-2011-0116](https://cve.now/CVE-2011-0116.md): Use-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as used in Apple iTunes before 10.2 on Windows (no CVSS)
- [CVE-2011-0117](https://cve.now/CVE-2011-0117.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0118](https://cve.now/CVE-2011-0118.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0119](https://cve.now/CVE-2011-0119.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0120](https://cve.now/CVE-2011-0120.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0121](https://cve.now/CVE-2011-0121.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0122](https://cve.now/CVE-2011-0122.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0123](https://cve.now/CVE-2011-0123.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0124](https://cve.now/CVE-2011-0124.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0125](https://cve.now/CVE-2011-0125.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0126](https://cve.now/CVE-2011-0126.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0127](https://cve.now/CVE-2011-0127.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0128](https://cve.now/CVE-2011-0128.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0129](https://cve.now/CVE-2011-0129.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0130](https://cve.now/CVE-2011-0130.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0131](https://cve.now/CVE-2011-0131.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0132](https://cve.now/CVE-2011-0132.md): Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation i (no CVSS)
- [CVE-2011-0133](https://cve.now/CVE-2011-0133.md): WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associ (no CVSS)
- [CVE-2011-0134](https://cve.now/CVE-2011-0134.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0135](https://cve.now/CVE-2011-0135.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0136](https://cve.now/CVE-2011-0136.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0137](https://cve.now/CVE-2011-0137.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0138](https://cve.now/CVE-2011-0138.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0139](https://cve.now/CVE-2011-0139.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0140](https://cve.now/CVE-2011-0140.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0141](https://cve.now/CVE-2011-0141.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0142](https://cve.now/CVE-2011-0142.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0143](https://cve.now/CVE-2011-0143.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0144](https://cve.now/CVE-2011-0144.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0145](https://cve.now/CVE-2011-0145.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0146](https://cve.now/CVE-2011-0146.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0147](https://cve.now/CVE-2011-0147.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0148](https://cve.now/CVE-2011-0148.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0149](https://cve.now/CVE-2011-0149.md): WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which all (no CVSS)
- [CVE-2011-0150](https://cve.now/CVE-2011-0150.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0151](https://cve.now/CVE-2011-0151.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0152](https://cve.now/CVE-2011-0152.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0153](https://cve.now/CVE-2011-0153.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0154](https://cve.now/CVE-2011-0154.md): WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort function for JavaScript arrays, (no CVSS)
- [CVE-2011-0155](https://cve.now/CVE-2011-0155.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0156](https://cve.now/CVE-2011-0156.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0164](https://cve.now/CVE-2011-0164.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0165](https://cve.now/CVE-2011-0165.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0168](https://cve.now/CVE-2011-0168.md): WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2011-0170](https://cve.now/CVE-2011-0170.md): Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2011-0191](https://cve.now/CVE-2011-0191.md): Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, (no CVSS)
- [CVE-2011-0192](https://cve.now/CVE-2011-0192.md): Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and ot (no CVSS)
- [CVE-2011-0455](https://cve.now/CVE-2011-0455.md): Cross-site scripting (XSS) vulnerability in Things BBS before 2.0.3 and BBS Thread before 2.0.3 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2011-0713](https://cve.now/CVE-2011-0713.md): Heap-based buffer overflow in wiretap/dct3trace.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause (no CVSS)
- [CVE-2011-1072](https://cve.now/CVE-2011-1072.md): The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to (no CVSS)
- [CVE-2011-1138](https://cve.now/CVE-2011-1138.md): Off-by-one error in the dissect\_6lowpan\_iphc function in packet-6lowpan.c in Wireshark 1.4.0 through 1.4.3 on 32-bit platforms allows remote (no CVSS)
- [CVE-2011-1139](https://cve.now/CVE-2011-1139.md): wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application (no CVSS)
- [CVE-2011-1140](https://cve.now/CVE-2011-1140.md): Multiple stack consumption vulnerabilities in the dissect\_ms\_compressed\_string and dissect\_mscldap\_string functions in Wireshark 1.0.x, 1.2. (no CVSS)
- [CVE-2011-1141](https://cve.now/CVE-2011-1141.md): epan/dissectors/packet-ldap.c in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-1142](https://cve.now/CVE-2011-1142.md): Stack consumption vulnerability in the dissect\_ber\_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through (CVSS 7.5)
- [CVE-2011-1143](https://cve.now/CVE-2011-1143.md): epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a denial of service (NU (no CVSS)
- [CVE-2011-1144](https://cve.now/CVE-2011-1144.md): The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, relate (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.