3762 matches found
Apple iOS TCP Header Handling Denial of Service Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A denial of service issue exists in the Apple iOS kernel's handling of TCP headers, allowing remote attackers to exploit the vulnerability for denial of service attacks...
Apple iOS multiple security vulnerabilities
Buffer overflows, DoS, memory corruption, restrictions bypass, weak cryptography...
CVE-2015-1061
IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...
Design/Logic Flaw
MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app...
Type confusion
IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...
Design/Logic Flaw
Springboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended activation requirement and read the home screen by leveraging an application crash during the activation process...
Buffer overflow
Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery...
CVE-2015-1063
CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service NULL pointer dereference and device restart via a Class 0 SMS message...
CVE-2015-1065
Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery...
CVE-2015-1061
CVE-2015-1061 concerns IOSurface: a type confusion flaw in handling serialized objects that could allow a crafted app to execute arbitrary code with system/privileged privileges across Apple iOS versions prior to 8.2, OS X up to 10.10.2, and Apple TV before 7.1. The issue was addressed by Apple S...
CVE-2015-1061
IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...
CVE-2015-1064
CVE-2015-1064 affects Apple iOS prior to 8.2. The vulnerability resides in Springboard: during activation, an application crash could allow a physically proximate attacker to bypass activation and view the home screen. The reported impact is limited to bypassing the intended activation flow and r...
Apple iOS Disk Mount Logic Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows applications to create folders in trusted locations by exploiting a disk mount logic vulnerability...
Apple iOS IOSurface Type Obfuscation Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A type confusion vulnerability exists in IOSurface when Apple iOS handles serialized objects, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...
Apple iOS iCloud Keychain Buffer Overflow Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a buffer overflow in processing data during iCloud Keychain recovery processing, which allows users who can conduct man-in-the-middle attacks to execute arbitrary code...
Apple iOS Security Bypass Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows physically accessible users to view the HOME screen of a target device even when the device is not active...
CVE-2015-1067
Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, related to the "FREAK" issue...
Apple iOS < 8.2 Multiple Vulnerabilities
Binary data appleios82check.nbin...