CVE-2012-0648

CVE-2012-0648 describes a memory corruption vulnerability in WebKit, specifically affecting Apple iTunes before version 10.6, which could allow man-in-the-middle attackers to execute arbitrary code or cause a denial of service during iTunes Store browsing. This vulnerability carries a high CVSS score of 7.6, indicating a severe risk due to its network-based attack vector, high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. While the EPSS score is low, suggesting a low probability of exploitation, there is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage.