3762 matches found
CVE-2014-4494
CVE-2014-4494 affects Apple iOS prior to 8.1.3, specifically the Springboard component. The issue is that signatures were not properly validated when deciding whether to solicit an enterprise-app trust decision, enabling bypass of first-launch trust prompts for enterprise-signed apps. The root ca...
CVE-2014-4483
The CVE is confirmed: CVE-2014-4483 affects Apple FontParser in PDF handling on Apple iOS before 8.1.3, OS X before 10.10.2, and Apple TV before 7.0.3. Root cause is a buffer/bounds-related issue in FontParser when processing font data inside PDFs, enabling a crafted font file to trigger a buffer...
CVE-2014-4480
CVE-2014-4480 affects Apple iOS < 8.1.3 and Apple TV
CVE-2014-4487
Affected products include Apple iOS, OS X, and Apple TV, with CVE-2014-4487 in IOHIDFamily. The issue is a buffer overflow in IOHIDFamily that allows arbitrary code execution in a privileged context. Apple references indicate updates: iOS 8.1.3, OS X 10.10.2, and Apple TV 7.0.3, addressing the vu...
CVE-2014-4479
Summary of CVE-2014-4479 (CWE-unclear in initial doc): WebKit used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3 is vulnerable. The issue allows an attacker to remotely execute arbitrary code or cause a denial of service (m...
CVE-2014-4492
CVE-2014-4492 involves a type confusion vulnerability in libnetcore affecting Apple devices (iOS before 8.1.3, OS X before 10.10.2, Apple TV before 7.0.3) where an attacker can craft an XPC message to sandboxed applications to trigger arbitrary code execution in the networkd context. The root cau...
CVE-2014-4493
The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an enterprise distribution certificate for signing a crafted app...
CVE-2014-4481
Integer overflow in CoreGraphics in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF document...
EUVD-2014-4419
libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an networkd context via a crafted XPC message from a sandboxed app, as demonstrated by la...
Apple iOS < 8.1.3 Multiple Vulnerabilities
Binary data appleios813check.nbin...
(Mobile Pwn2Own) Apple iOS SSL Sandbox Bypass Vulnerability
This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of SSL...
IBM Endpoint Manager Enrollment and Apple iOS Management Extender Detection
Binary data ibmtemmdmiosextenderdetect.nbin...
CVE-2014-8128
LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service out-of-bounds write via a crafted TIFF image...
Apple iOS v8.x - Message Context & Privacy Vulnerability
Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1346 Video: http://www.vulnerability-lab.com/getcontent.php?id=1350 Release Date: ============= 2014-12-16...
Apple iOS v8.x - Message Context & Privacy Vulnerability
Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1346 Video: http://www.vulnerability-lab.com/getcontent.php?id=1350 Vulnerability Magazine:...
Apple iOS v8.x - Message Context & Privacy Vulnerability
Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1350 Video: https://www.youtube.com/watch?v=NpL3Yj0qSXI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1346 Release Dat...
Apple iOS v8.x - Message Context & Privacy Vulnerability
Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1350 Video: https://www.youtube.com/watch?v=NpL3Yj0qSXI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1346 Release Dat...
CVE-2014-6140
IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...
Code injection
IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...
Apple iOS security bypass Vulnerability(CVE-2 0 1 4-4 4 5 7)-vulnerability warning-the black bar safety net
Affected system: Apple iOS 8.1.1 Description: BUGTRAQ ID: 7 1 1 4 3 CVECAN ID: CVE-2 0 1 4-4 4 5 7 OS X, formerly Mac OS X Apple for Macintosh the development of dedicatedoperating systemthe latest version. iOS is by Apple for mobile devices developed bythe operating system, the supported devices...