CVE-2014-4487: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2014-4486: Undefined Security Weakness

IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly handle resource lists and IOService userclient types, which allows attackers to execute arbitrary code or cause a denial of service NULL pointer dereference via a crafted app...

CVE-2014-4484: Undefined Security Weakness

FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted .dfont file...

CVE-2014-4467: Undefined Security Weakness

WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site...

CVE-2014-4479: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2014-4477: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2014-4494: Improper Input Validation

Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app trust decision from the user, which allows attackers to bypass intended first-launch restrictions by leveraging access to an enterprise distribution certificate for signing a...

CVE-2014-4483: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font file in a PDF document...

CVE-2014-4492: Undefined Security Weakness

libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an networkd context via a crafted XPC message from a sandboxed app, as demonstrated by la...

CVE-2014-4488: Undefined Security Weakness

IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly validate resource-queue metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2014-4491: Exposure of Sensitive Information to an Unauthorized Actor

The extension APIs in the kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 do not prevent the presence of addresses within an OSBundleMachOHeaders key in a response, which makes it easier for attackers to bypass the ASLR protection mechanism via a crafted app...

PT-2015-3758

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.3 Apple OS X versions prior to 10.10.2 Apple TV versions prior to 7.0.3 Description The issue concerns the kernel's failure to enforce the read-only attribute of a shared memory segment when using a custom cache...

PT-2015-3752

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.3 Apple OS X versions prior to 10.10.2 Apple TV versions prior to 7.0.3 Description The issue is related to the IOHIDFamily component, which does not properly validate resource-queue metadata. This allows...

CVE-2014-4496: Undefined Security Weakness

The machportkobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address and heap-permutation information, which makes it easier for attackers to bypass the ASLR protection mechanism via a crafted app...

Apple iOS < 8.1.3 Multiple Vulnerabilities

Binary data appleios813check.nbin...

PT-2015-4106

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.3 Description The issue allows remote attackers to bypass a Safari sandbox protection mechanism. This is achieved by leveraging the redirection of an SSL URL to the iTunes Store. Recommendations For versions pri...

(Mobile Pwn2Own) Apple iOS SSL Sandbox Bypass Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of SSL...

PT-2015-3748

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.3 Apple OS X versions prior to 10.10.2 Apple TV versions prior to 7.0.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and...

IBM Endpoint Manager Enrollment and Apple iOS Management Extender Detection

Binary data ibmtemmdmiosextenderdetect.nbin...

CVE-2014-8128

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service out-of-bounds write via a crafted TIFF image...