CVE-2011-0116

CVE-2011-0116 describes a use-after-free vulnerability within the setOuterText method of the WebKit htmlelement library, specifically impacting Apple iTunes before version 10.2 on Windows. This flaw allows remote attackers, acting as man-in-the-middle, to execute arbitrary code or trigger a denial of service through memory corruption and application crashes during iTunes Store browsing. With a CVSS score of 7.6, it is considered highly severe due to its network attack vector, high attack complexity, and complete impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.