CVE-2011-1344

N/A Unknown
Published: March 10, 2011 Modified: April 29, 2026
View on NVD

Description

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
Source: cve@mitre.org
http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html
Source: cve@mitre.org
http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html
Source: cve@mitre.org
http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html
Source: cve@mitre.org
http://secunia.com/advisories/44151
Source: cve@mitre.org
http://secunia.com/advisories/44154
Source: cve@mitre.org
http://support.apple.com/kb/HT4596
Source: cve@mitre.org
http://support.apple.com/kb/HT4607
Source: cve@mitre.org
http://twitter.com/aaronportnoy/statuses/45632544967901187
Source: cve@mitre.org
http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/517505/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/517517/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/46822
Source: cve@mitre.org
http://www.securitytracker.com/id?1025363
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2011/0984
Source: cve@mitre.org
http://www.zdnet.com/blog/security/safarimacbook-first-to-fall-at-pwn2own-2011/8358
Source: cve@mitre.org
http://www.zerodayinitiative.com/advisories/ZDI-11-135
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/66061
Source: cve@mitre.org
http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/44151
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/44154
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.apple.com/kb/HT4596
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.apple.com/kb/HT4607
Source: af854a3a-2127-422b-91ae-364da2661108
http://twitter.com/aaronportnoy/statuses/45632544967901187
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/517505/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/517517/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/46822
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1025363
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2011/0984
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.zdnet.com/blog/security/safarimacbook-first-to-fall-at-pwn2own-2011/8358
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.zerodayinitiative.com/advisories/ZDI-11-135
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/66061
Source: af854a3a-2127-422b-91ae-364da2661108

36 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
5.9%
92th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-399

Affected Vendors

apple

Related CVEs

CVE-2026-40941 N/A
CVE-2026-40084 6.5
CVE-2026-40083 7.2
CVE-2026-40082 5.4
CVE-2026-40080 6.1