4800 matches found
CVE-2015-3728: Undefined Security Weakness
The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitrary security type, by operating with a recognized ESSID within an 802.11 network's coverage area...
CVE-2015-3658: Undefined Security Weakness
The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to...
CVE-2015-3724: Improper Restriction of Operations within the Bounds of a Memory Buffer
CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ICC profile in a PDF document, a different vulnerability than CVE-2015-3723...
CVE-2015-3710: Undefined Security Weakness
Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and consequently cause a visit to an arbitrary web site, via a crafted HTML e-mail message...
CVE-2015-3721: Exposure of Sensitive Information to an Unauthorized Actor
The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app...
CVE-2015-3659: Undefined Security Weakness
The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cau...
CVE-2015-3726: Improper Input Validation
The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted 1 SIM or 2 UIM card...
CVE-2015-3725: Undefined Security Weakness
MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...
CVE-2015-3717: Buffer Copy without Checking Size of Input
Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...
PT-2015-6282
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via crafted credentials in a URL. This is relate...
PT-2015-6308
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue allows remote attackers to trigger a refresh operation and cause a visit to an arbitrary web site via a crafted HTML e-mail message. Recommendations For...
Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04292)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS's handling of ICC files, which allows attackers to construct malicious PDF files and trick users into parsing them, which can execute arbitrary code...
Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04308)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of text files in Apple iOS, which allows attackers to construct malicious text files and trick users into parsing them, which can execute arbitrary...
Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04309)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of text files in Apple iOS, which allows attackers to construct malicious text files and trick users into parsing them, which can execute arbitrary...
Apple iOS Malicious SIM Input Verification Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS parses SIM/UIM loads in the presence of input validation, allowing attackers to exploit the vulnerability to execute arbitrary code using a malicious SIM card...
Apple iOS SQLite Buffer Overflow Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Multiple buffer overflows in the printf implementation of Apple iOS SQLite allow attackers to exploit vulnerabilities to conduct denial of service attacks or execute arbitrary code...
PT-2015-6325
Name of the Vulnerable Software and Affected Versions Apple Safari versions 6.2.7 and earlier, 7.x through 7.1.6, and 8.x through 8.0.6 Apple iOS versions prior to 8.4 Description The issue allows remote attackers to access an arbitrary web site's database via a crafted web site, due to improper...
Apple iOS ICC Profile tag count Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ICC...
Apple iOS ICC Profile curv Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ICC...
