3761 matches found
CVE-2013-5131
Cross-site scripting XSS vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2013-5139
The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...
CVE-2013-5151
CVE-2013-5151 affects Mobile Safari on iOS prior to 7. The issue arises when a document served with Content-Type: text/plain is treated as HTML, allowing remote attackers to trigger cross-site scripting by uploading a file. Apple’s vulnerability entry for Safari (CVE-2013-5151) notes the impact a...
CVE-2013-5159
The CVE-2013-5159 entry concerns WebKit in Apple iOS prior to 7, where a vulnerability allowed a remote attacker to bypass the Same Origin Policy via an iframe and infer use of the window.webkitRequestAnimationFrame API, potentially exposing information about page behavior. Affected component: We...
CVE-2013-5129
CVE-2013-5129 affects WebKit in Apple iOS prior to 7. It describes two user-assisted XSS vectors: (1) drag-and-drop and (2) copy-and-paste, allowing an attacker to inject arbitrary script/HTML via data handled by WebKit. The vulnerability arises from how WebKit processes dragged/pasted content an...
CVE-2013-5125
CVE-2013-5125 is listed among Apple iTunes WebKit-related vulnerabilities. Nessus/OpenVAS entries indicate it is part of memory corruption flaws in WebKit (and related components) used by iTunes on Windows, potentially enabling arbitrary code execution via memory corruption when browsing the iTun...
CVE-2013-5139
The CVE-2013-5139 entry concerns the IOSerialFamily driver. The description (supported by multiple connected records) states that an out-of-bounds array access in IOSerialFamily could allow a crafted application to cause arbitrary code execution or a denial of service. Affected platforms include ...
CVE-2013-5152
CVE-2013-5152 affects Mobile Safari on Apple iOS versions prior to 7.0, where a crafted website can spoof the URL bar. The Apple advisory notes addressing this with iOS 7.0 (and later) updates, i.e., remediation via updating to the latest iOS version. No additional technical details (root cause o...
CVE-2013-5142
CVE-2013-5142 affects the Apple iOS kernel, before iOS 7.0. Root cause: kernel does not initialize certain data structures, enabling local users to read kernel stack memory via msgctl and segctl. Impact: information disclosure on local hosts. Remediation: update to iOS 7 or later where the issue ...
CVE-2013-1043
CVE-2013-1043 affects WebKit used in Apple iOS prior to 7. A remote attacker can trigger memory corruption to execute arbitrary code or cause a denial of service by visiting a crafted website, potentially crashing the application. The NVD notes a base score of 6.8 (Medium) with network attack vec...
CVE-2013-1041
CVE-2013-1041 affects WebKit as used in Apple iOS before 7. The vulnerability is a memory corruption flaw in WebKit that can be triggered by a crafted web site, enabling remote code execution or a denial of service (application crash). Public references in the connected documents place this CVE a...
CVE-2013-1037
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...
CVE-2013-0957
Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and consequently avoid a configured Erase Data setting, by leveraging the presence of an app in the third-party sandbox...
CVE-2013-5158
The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors...
CVE-2013-5147
Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging a race condition involving phone calls and ejection of a SIM card...
CVE-2013-5152
Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site...
CVE-2013-5128
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...
CVE-2013-5137
IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control over a background app and using the 1 task-completion API or 2 VoIP API...
CVE-2013-5127
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...