4800 matches found
CVE-2014-4476
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...
CVE-2014-4467
WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site...
Design/Logic Flaw
The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an enterprise distribution certificate for signing a crafted app...
Code injection
WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site...
Memory corruption
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...
CVE-2014-4477
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...
UBUNTU-CVE-2014-4467
WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site...
CVE-2014-4494
CVE-2014-4494 affects Apple iOS prior to 8.1.3, specifically the Springboard component. The issue is that signatures were not properly validated when deciding whether to solicit an enterprise-app trust decision, enabling bypass of first-launch trust prompts for enterprise-signed apps. The root ca...
CVE-2014-4480
Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by creating a symlink...
CVE-2014-4483
Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font file in a PDF document...
EUVD-2014-4419
libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an networkd context via a crafted XPC message from a sandboxed app, as demonstrated by la...
CVE-2014-4493
The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an enterprise distribution certificate for signing a crafted app...
CVE-2014-4477
Technical details (affected components, exploit methods, impact, or fixes for CVE-2014-4477) are not provided in the Connected documents; monitor for updates from official advisories.
CVE-2014-4479
Summary of CVE-2014-4479 (CWE-unclear in initial doc): WebKit used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3 is vulnerable. The issue allows an attacker to remotely execute arbitrary code or cause a denial of service (m...
CVE-2014-4483
The CVE is confirmed: CVE-2014-4483 affects Apple FontParser in PDF handling on Apple iOS before 8.1.3, OS X before 10.10.2, and Apple TV before 7.0.3. Root cause is a buffer/bounds-related issue in FontParser when processing font data inside PDFs, enabling a crafted font file to trigger a buffer...
CVE-2014-4485
CVE-2014-4485: Buffer overflow in Foundation XML parser affects iOS before 8.1.3, OS X before 10.10.2, and Apple TV before 7.0.3. Remote code execution or app crash possible via crafted XML. Remediation: update to iOS 8.1.3, OS X 10.10.2, or Apple TV 7.0.3+.
CVE-2014-4487
Affected products include Apple iOS, OS X, and Apple TV, with CVE-2014-4487 in IOHIDFamily. The issue is a buffer overflow in IOHIDFamily that allows arbitrary code execution in a privileged context. Apple references indicate updates: iOS 8.1.3, OS X 10.10.2, and Apple TV 7.0.3, addressing the vu...
CVE-2014-4492
CVE-2014-4492 involves a type confusion vulnerability in libnetcore affecting Apple devices (iOS before 8.1.3, OS X before 10.10.2, Apple TV before 7.0.3) where an attacker can craft an XPC message to sandboxed applications to trigger arbitrary code execution in the networkd context. The root cau...
CVE-2014-4496
CVE-2014-4496 affects Apple iOS before 8.1.3 and Apple TV before 7.0.3, where the mach_port_kobject kernel interface leaked kernel addresses and heap permutation values, aiding ASLR bypass. The issue was addressed by disabling the mach_port_kobject interface in production configurations and is li...