CVE-2015-5802: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5788

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

CVE-2015-5817: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5812: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5793: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

PT-2015-2083

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit component in Apple iOS, which does not properly restrict access to sensitive information. This allows remote attackers to obtain sensitive information about the brows...

CVE-2015-5838: Improper Access Control

SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app...

CVE-2015-5885: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain...

CVE-2015-5796: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5879: Improper Input Validation

XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service TCP connection disruption via a crafted header...

CVE-2015-5874: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2015-5905: Undefined Security Weakness

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site...

CVE-2015-5840: Improper Restriction of Operations within the Bounds of a Memory Buffer

The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service overflow fault and app crash via crafted data...

CVE-2015-5847: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Disk Images component in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5906: Exposure of Sensitive Information to an Unauthorized Actor

The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character of a password, which might make it easier for remote attackers to discover a password by leveraging a later prediction containing that character...

CVE-2015-5882: Improper Access Control

The processorsettasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges...

CVE-2015-5868: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5896 and CVE-2015-5903...

CVE-2015-5903: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5896...

PT-2015-2111

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to a buffer overflow in the Audio component, which can be exploited by remote attackers using a crafted audio file. This exploitation can cause a denial of service, resulting in...

CVE-2015-5797: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...