PT-2015-1767

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Apple OS X versions prior to 10.10.5 Description The issue is related to an integer overflow in the kernel, allowing attackers to execute arbitrary code in a privileged context. This can be achieved via a...

PT-2015-1911

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Apple OS X versions prior to 10.10.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted TI...

PT-2015-1910

Name of the Vulnerable Software and Affected Versions Apple iOS and Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the FontParser component. This can be exploited by a remote attacker using a specially crafted font file, potentially allowing them ...

PT-2015-1909

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Apple OS X versions prior to 10.10.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted fo...

PT-2015-1919

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Apple OS X versions prior to 10.10.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted...

PT-2015-1921

Name of the Vulnerable Software and Affected Versions ImageIO in Apple iOS versions prior to 8.4.1 ImageIO in Apple OS X versions prior to 10.10.5 Description The issue is related to the ImageIO component in iOS and Mac OS X, which lacks protection of internal data. This can be exploited by a...

PT-2015-1920

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Apple OS X versions prior to 10.10.5 Description The issue is caused by a buffer overflow in the CoreMedia Playback component. This can be exploited by a remote attacker using a specially crafted video file,...

Apple iOS < 8.3 Multiple Vulnerabilities

Binary data 8803.prm...

Apple iO Disk Image Processing Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a security vulnerability in the handling of disk files that allows attackers to build malicious applications and gain access to the kernel layout...

Hackers Release Hacking Team Internal Documents After Breach

Attackers have compromised the network of Italian intrusion software vendor Hacking Team and released a large cache of the company’s private documents, including customer invoices that show sales to oppressive governments. The incident came to light Sunday evening when unnamed attackers released ...

Apple iOS multiple security vulnerabilities

DoS, certificate trust vulnerabilities, multiple memory corruptions, information disclosure, weak cyphers, code execution...

CVE-2015-3728

The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitrary security type, by operating with a recognized ESSID within an 802.11 network's coverage area...

CVE-2015-3726

The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted 1 SIM or 2 UIM card...

CVE-2015-3725

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...

CVE-2015-3724

CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ICC profile in a PDF document, a different vulnerability than CVE-2015-3723...

CVE-2015-3722

Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service ID collision and launch outage via a crafted universal provisioning profile app...

CVE-2015-3719

TrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3694...

CVE-2015-3717

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

Memory corruption

CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ICC profile in a PDF document, a different vulnerability than CVE-2015-3724...

Design/Logic Flaw

The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitrary security type, by operating with a recognized ESSID within an 802.11 network's coverage area...