CVE-2015-6999: Undefined Security Weakness

The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate...

PT-2015-7442

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6993,...

PT-2015-7434

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993,...

PT-2015-7451

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...

PT-2015-7441

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6991, CVE-2015-6993,...

PT-2015-7432

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Apple watchOS versions prior to 2.0.1 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory...

PT-2015-7445

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Description The issue is related to the misparsing of images by the Disk Images component, which can be exploited by attackers to execute arbitrary code or cause a denial of...

PT-2015-7458

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Apple watchOS versions prior to 2.0.1 Description A heap-based buffer overflow issue exists in the DNS client library in configd, allowing attackers to execute arbitrary code...

PT-2015-7089

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5937...

PT-2015-7452

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...

PT-2015-7449

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Apple watchOS versions prior to 2.0.1 Description A directory traversal issue in the BOM component allows remote attackers to execute arbitrary code via a crafted CPIO archiv...

PT-2015-7436

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Description A double free issue allows attackers to write to arbitrary files by using a crafted app that accesses AtomicBufferedFile descriptors. Recommendations For Apple iO...

PT-2015-7460

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...

PT-2015-7443

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...

CVE-2015-7002: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-7017: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-6992...

CVE-2015-6982: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1...

CVE-2015-5930: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5929: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

PT-2015-2457

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Description The issue is caused by a buffer overflow in the WebKit component. It allows a remote attacker to execute arbitrary code or cause a denial of service, such as memory corruption and application crash, ...