3765 matches found
CVE-2015-5821
CVE-2015-5821 details (concrete in sources): WebKit, as used in Apple iOS prior to 9 and iTunes prior to 12.3, is vulnerable to remote exploitation via a crafted web site. The underlying issue is memory corruption that can lead to arbitrary code execution or memory corruption resulting in an appl...
CVE-2015-5803
CVE-2015-5803 concerns WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted web site could allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash). The underlying issue is within WebKit; the description notes this is a...
CVE-2015-5840
CVE-2015-5840 affects Apple iOS (pre-9) with the removefile( ) checkint division routines. The root cause is an overflow fault in the division routines used by removefile’s data processing, allowing a crafted input to trigger a denial-of-service (app crash). Connected docs corroborate the same is...
CVE-2015-5856
The Application Store component in Apple iOS before 9 allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL...
CVE-2015-5788
The CVE-2015-5788 entry describes a flaw in WebKit Canvas handling on iOS prior to version 9 that allows remote attackers to bypass the same-origin policy and read sensitive image data via CANVAS-related vectors. The vulnerability affects the WebKit Canvas implementation and arises from insuffici...
CVE-2015-5799
CVE-2015-5799 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3, enabling remote execution of code or a memory corruption-induced denial of service via a crafted web site. The connected advisories indicate the issue resides in WebKit/WebKit2 and that a fix was released in WebKit...
CVE-2015-5850
AppleKeyStore in Apple iOS before 9 allows physically proximate attackers to reset the count of incorrect passcode attempts via a device backup...
CVE-2015-5834
IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...
CVE-2015-5868
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5896 and CVE-2015-5903...
CVE-2015-5811
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5764
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767...
CVE-2015-5843
Summary (CVE-2015-5843) : A memory corruption vulnerability exists in IOMobileFrameBuffer on Apple iOS versions prior to 9.0, enabling a local attacker to gain privileges or cause a denial of service via unspecified vectors. The vulnerability is addressed in iOS 9 by Apple’s update; affected comp...
CVE-2015-5898
CVE-2015-5898 affects CFNetwork in Apple iOS before 9. The issue: CFNetwork caches data using a key protected only by the hardware UID, enabling physically proximate attackers to access cached information. The root cause is the cache encryption key being derived from the hardware UID alone. Impac...
CVE-2015-5848
IOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...
CVE-2015-3801
CVE-2015-3801 affects Apple iOS WebKit’s CFNetwork Cookies: the document.cookie API could be used to bypass a single-cookie restriction in WebKit’s cookie handling, prior to iOS 9. The issue originates in CFNetwork Cookies (WebKit) and is exploitable via unspecified vectors over the network. The ...
CVE-2015-5816
The CVE-2015-5816 entry concerns WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. The description does n...
CVE-2015-5801
CVE-2015-5801 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site could cause remote code execution or a denial of service via memory corruption, leading to an application crash. The vulnerability is triggered through WebKit’s handling of web content, and is d...
CVE-2015-5839
dyld in Apple iOS before 9 allows attackers to bypass a code-signing protection mechanism via an app that places a crafted signature in an executable file...
CVE-2015-5807
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...