CVE-2015-1064

CVE-2015-1064 affects Apple iOS prior to 8.2. The vulnerability resides in Springboard: during activation, an application crash could allow a physically proximate attacker to bypass activation and view the home screen. The reported impact is limited to bypassing the intended activation flow and r...

CVE-2015-1061

IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...

CVE-2015-1065

Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery...

Apple iOS iCloud Keychain Buffer Overflow Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a buffer overflow in processing data during iCloud Keychain recovery processing, which allows users who can conduct man-in-the-middle attacks to execute arbitrary code...

CVE-2015-1062: Undefined Security Weakness

MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app...

PT-2015-5050

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.2 Apple OS X versions prior to 10.10.2 Description The issue allows man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery, due to multiple buffer...

Apple iOS IOSurface Type Obfuscation Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A type confusion vulnerability exists in IOSurface when Apple iOS handles serialized objects, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

CVE-2015-1061: Improper Control of Generation of Code

IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...

Apple iOS Disk Mount Logic Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows applications to create folders in trusted locations by exploiting a disk mount logic vulnerability...

Apple iOS Security Bypass Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows physically accessible users to view the HOME screen of a target device even when the device is not active...

PT-2015-5049

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.2 Description The issue allows physically proximate attackers to bypass an intended activation requirement and read the home screen by leveraging an application crash during the activation process. Recommendations...

PT-2015-1002

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.2 Apple OS X versions through 10.10.2 Apple TV versions prior to 7.1 Description The issue allows a remote attacker to execute arbitrary code with elevated privileges using a malicious application that exploits ty...

PT-2015-5048

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.2 Apple TV versions prior to 7.1 Description The issue concerns the MobileStorageMounter component, which fails to delete invalid disk-image folders. This allows attackers to create folders in arbitrary filesystem...

CVE-2015-1067

Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, related to the "FREAK" issue...

CVE-2015-1067: Undefined Security Weakness

Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORTRSA ciphers via crafted TLS traffic, related to the "FREAK" issue...

Apple iOS < 8.2 Multiple Vulnerabilities

Binary data appleios82check.nbin...

Apple iOS < 8.1.3 Multiple Vulnerabilities

Binary data 8639.prm...

Apple iOS 8.x < 8.1.1 Multiple Vulnerabilities.

Binary data 8940.prm...

Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1322 Video: http://www.vulnerability-lab.com/getcontent.php?id=1334 Release Date: ============= 2015-03-02...

Apple iOS 8.x - Local Controls Re Auth Bypass Vulnerability

Document Title: =============== Apple iOS 8.x - Local Controls Re Auth Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1334 View: https://www.youtube.com/watch?v=H3lefsmqO4o Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1322 Release...