PT-2015-2117

Name of the Vulnerable Software and Affected Versions Dev Tools in Apple iOS versions prior to 9 Description The issue is related to a buffer overflow in the dyld component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service due to...

CVE-2015-5812: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5837: Improper Input Validation

PluginKit in Apple iOS before 9 allows attackers to bypass an intended app-trust requirement and install arbitrary extensions via a crafted enterprise app...

CVE-2015-5857: Undefined Security Weakness

Mail in Apple iOS before 9 allows remote attackers to use an address-book contact as a spoofed e-mail sender address via unspecified vectors...

CVE-2015-5907: Undefined Security Weakness

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...

CVE-2015-5896: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903...

CVE-2015-5869: Improper Input Validation

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...

CVE-2015-5764: Improper Input Validation

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767...

PT-2015-2088

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the iTunes Store component in Apple iOS, which does not properly handle AppleID credentials upon signout. This might allow physically proximate attackers to obtain sensitive...

CVE-2015-5788: Exposure of Sensitive Information to an Unauthorized Actor

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

CVE-2015-5867: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-5790: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5795: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5794: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5803: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5806: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5822: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5838: Improper Access Control

SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app...

CVE-2015-5819: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5813: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...