Apple iOS < 8.4 Multiple Vulnerabilities (Logjam)

Binary data appleios84check.nbin...

Apple iOS memory corruption

A combination of UTF-8 characters leads to memory corruption...

Apple iOS 8.0.3 - Silent VCF & iMessage DoS Vulnerability

Document Title: =============== Apple iOS 8.0.3 - Silent VCF & iMessage DoS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1324 Video: http://www.vulnerability-lab.com/getcontent.php?id=1333 Article:...

Design/Logic Flaw

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service reboot and messaging disruption via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in 1 an SMS message or 2 a...

CVE-2015-1157

CVE-2015-1157 affects CoreText in Apple iOS 8.x through 8.3. A crafted Unicode string is not handled correctly during Notification display truncation, allowing remote attackers to cause a denial of service (reboot and messaging disruption) via SMS or WhatsApp messages. Impact aligns with DoS; no ...

CVE-2015-1157

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service reboot and messaging disruption via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in 1 an SMS message or 2 a...

PT-2015-1330

Name of the Vulnerable Software and Affected Versions Apple iOS versions 8.x through 8.3 Apple iOS before 8.4.1 Safari before 6.2.8 Safari 7.x before 7.1.8 Safari 8.x before 8.0.8 Description The issue is related to errors in the code and allows remote attackers to cause a denial of service,...

Apple iOS Detection

Binary data 4134.prm...

Apple iOS 8.0.2 Authentication Bypass Vulnerability

Apple IOS versions 8.0 through 8.0.2 suffer from a lock bypass vulnerability. Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability Product & Service Introduction: =============================== iOS previously iPhone OS is a mobile operating system develop...

Apple iOS Information Disclosure Vulnerability (CNVD-2015-02514)

Apple iOS is an operating system for handheld devices developed by Apple Inc. Apple iOS suffers from an information disclosure vulnerability. An attacker is allowed to exploit this vulnerability to obtain sensitive information...

CVE-2015-1124

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1123

WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and...

CVE-2015-1121

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1117

The 1 setreuid and 2 setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not properly perform privilege drops, which makes it easier for attackers to execute code with unintended user or group privileges via a crafted a...

CVE-2015-1115

The Telephony component in Apple iOS before 8.3 allows attackers to bypass a sandbox protection mechanism and access unintended telephone capabilities via a crafted app...

CVE-2015-1113

The Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the 1 telephone number or 2 e-mail address of a recent contact via a crafted app...

CVE-2015-1111

Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history-clearing action, which allows attackers to obtain sensitive information by reading a history file...

CVE-2015-1107

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

CVE-2015-1106

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard...

CVE-2015-1099

Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app...