3762 matches found
CVE-2014-1272
CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink...
CVE-2014-1290
CVE-2014-1290 affects WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. It is described as a distinct issue from CVE-2014...
CVE-2014-1272
CVE-2014-1272 affects Apple iOS before 7.1 and Apple TV before 6.1, in CrashHouseKeeping (Crash Reporting). The issue allows a local user to change arbitrary file permissions by leveraging a symlink, due to following symbolic links when altering permissions. Impact is local privilege-related with...
CVE-2014-1273
CVE-2014-1273 affects Apple iOS before 7.1 and Apple TV before 6.1. The issue in dyld arises from loading text relocation instructions in dynamic libraries, allowing bypass of code-signing requirements. Apple’s 7.1/6.1 updates address this by ignoring text relocation instructions during dynamic l...
CVE-2013-6835
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
CVE-2014-1290
WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293...
CVE-2014-1293
WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...
CVE-2014-1286
SpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of service lock-screen hang by leveraging a state-management error...
CVE-2014-1294
CVE-2014-1294 affects WebKit as used in Apple iOS prior to 7.1 and Apple TV prior to 6.1. A crafted website can trigger remote code execution or a denial of service through memory corruption, causing an application crash. This entry is related to other CVEs in the same family (e.g., CVE-2014-1289...
CVE-2013-5133
CVE-2013-5133 affects Apple iOS prior to 7.1, where a flaw in the backup/restore process did not properly restrict symbolic links. This could allow a remote attacker to overwrite files during a restore via crafted backup data. The underlying issue is an improper handling of symlinks during the re...
CVE-2014-1294
WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...
CVE-2014-1275
Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JPEG2000 data in a PDF document...
CVE-2014-1292
WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1293...
CVE-2014-1280
Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service NULL pointer dereference and device hang via a crafted video file with MPEG-4 encoding...
CVE-2014-1292
Technical details for CVE-2014-1292 are not publicly provided in the connected documents. The materials reference the WebKit vulnerability affecting Apple iOS before 7.1 and Apple TV before 6.1, but do not include explicit affected versions, impact specifics, or fixes.
CVE-2014-1289
Technical details for CVE-2014-1289 are not publicly available in the provided documents. Please monitor for updates.
CVE-2014-1281
CVE-2014-1281 affects Apple iOS prior to 7.1, specifically the Photos Backend asset-library cache handling during deletions. The issue allows physically proximate attackers to access sensitive photo data by triggering the Photos app and inspecting a transparent image beneath it. The root cause is...
CVE-2014-1271
CVE-2014-1271 concerns CoreCapture in Apple iOS prior to 7.1 and Apple TV prior to 6.1. The vulnerability arises because CoreCapture does not properly validate IOKit API calls, which can allow a crafted app to trigger a denial of service via assertion failure and device crash. The issue centers o...
