CVE-2012-3702

CVE-2012-3702 describes a memory corruption vulnerability in WebKit, specifically affecting Apple iTunes prior to version 10.7. This flaw allows remote attackers to execute arbitrary code or trigger a denial of service by enticing a user to visit a specially crafted website. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring user interaction (AC:M) but no authentication (Au:N) for exploitation, and can lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no known public exploit code (Metasploit, Nuclei, ExploitDB) or evidence of active exploitation, and it has garnered minimal community discussion or media coverage.