UBUNTU-CVE-2014-1325

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1355

The IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and in IOReporting in Apple OS X before 10.9.4, allows local users to cause a denial of service NULL pointer dereference and reboot via crafted API arguments...

CVE-2014-1358

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1351

CVE-2014-1351 affects Apple iOS prior to 7.1.2. On the lock screen, a Siri request that references a contact ambiguously could cause Siri to display a contact list without the passcode, bypassing the lock-screen requirement and exposing contacts. Root cause: Siri on the lock screen can reveal the...

CVE-2014-1349

CVE-2014-1349 affects Safari on Apple iOS before 7.1.2. The vulnerability is a use-after-free in Safari’s handling of invalid URLs, allowing remote attackers to cause an app crash or potentially execute arbitrary code. The Apple advisory (iOS 7.1.2) documents a set of fixes; for this CVE, upgrade...

CVE-2014-1363

The CVE-2014-1363 issue involves WebKit as used in Apple software (iOS prior to 7.1.2; Safari prior to 6.1.5 and 7.x prior to 7.0.5; Apple TV prior to 6.1.2). The vulnerability affects the WebKit component and is triggered via a crafted web site, enabling remote attackers to execute arbitrary cod...

CVE-2014-1348

Mail in Apple iOS before 7.1.2 advertises the availability of data protection for attachments but stores cleartext attachments under mobile/Library/Mail/, which makes it easier for physically proximate attackers to obtain sensitive information by mounting the data partition...

CVE-2014-1352

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...

CVE-2014-1364

CVE-2014-1364 affects WebKit as used in Apple iOS up to 7.1.2, Safari up to 6.1.5 and 7.x up to 7.0.5, and Apple TV up to 6.1.2. A crafted web site can cause remote code execution or memory corruption leading to a crash (DoS). Root cause: memory corruption in WebKit. Exploitation is not detailed ...

CVE-2014-1363

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1366

CVE-2014-1366 affects WebKit used in Apple iOS before 7.1.2, Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2. Description: remote attackers could execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption and application crash. Root cause...

CVE-2014-1368

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1356

CVE-2014-1356 is a heap buffer overflow in launchd’s handling of IPC messages that could allow arbitrary code execution with system privileges. Affected: iOS 7.1.2, OS X 10.9.4, and Apple TV 6.1.2. Root cause: improved bounds checking addressed the issue. Remediation: apply the corresponding Appl...

CVE-2014-1350

CVE-2014-1350 affects Apple iOS prior to 7.1.2. The issue stems from incorrect state management of the Find My iPhone (iCloud) state, allowing physically proximate attackers to bypass the iCloud password requirement and turn off Find My iPhone. Supported in the iOS 7.1.2 update, which addresses m...

CVE-2014-1348

CVE-2014-1348 concerns Apple iOS

CVE-2014-1365

CVE-2014-1365 affects WebKit as used in Apple iOS before 7.1.2, Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) through a crafted websit...

CVE-2014-1365

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1349

Use-after-free vulnerability in Safari in Apple iOS before 7.1.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an invalid URL...

CVE-2014-1364

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1362

CVE-2014-1362 affects WebKit as used in Apple iOS prior to 7.1.2, Safari prior to 6.1.5 and 7.x prior to 7.0.5, and Apple TV prior to 6.1.2. The vulnerability enables remote attackers to cause memory corruption, leading to arbitrary code execution or a denial of service via a crafted web site. Th...