CVE-2013-1004

CVE-2013-1004 describes a critical vulnerability in WebKit, specifically affecting Apple iTunes before version 11.0.3 across various Apple and Microsoft operating systems. This flaw allows man-in-the-middle attackers to execute arbitrary code or trigger a denial of service through memory corruption and application crashes during iTunes Store browsing. With a CVSS score of 9.3, this vulnerability is highly severe, requiring medium attack complexity but offering complete confidentiality, integrity, and availability impact. The attack vector is network-based, meaning an attacker does not need local access to the affected system. Despite its high severity, there is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, indicating a lack of widespread attention.