Apple iOS v8.x - Message Context & Privacy Vulnerability

Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1346 Video: http://www.vulnerability-lab.com/getcontent.php?id=1350 Release Date: ============= 2014-12-16...

Apple iOS v8.x - Message Context & Privacy Vulnerability

Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1350 Video: https://www.youtube.com/watch?v=NpL3Yj0qSXI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1346 Release Dat...

Apple iOS v8.x - Message Context & Privacy Vulnerability

Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1350 Video: https://www.youtube.com/watch?v=NpL3Yj0qSXI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1346 Release Dat...

Apple iOS v8.x - Message Context & Privacy Vulnerability

Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1346 Video: http://www.vulnerability-lab.com/getcontent.php?id=1350 Vulnerability Magazine:...

CVE-2014-6140

IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...

Code injection

IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...

CVE-2014-6140: Undefined Security Weakness

IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...

Apple iOS security bypass Vulnerability(CVE-2 0 1 4-4 4 5 7)-vulnerability warning-the black bar safety net

Affected system: Apple iOS 8.1.1 Description: BUGTRAQ ID: 7 1 1 4 3 CVECAN ID: CVE-2 0 1 4-4 4 5 7 OS X, formerly Mac OS X Apple for Macintosh the development of dedicatedoperating systemthe latest version. iOS is by Apple for mobile devices developed bythe operating system, the supported devices...

CVE-2014-4462

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4452...

CVE-2014-4452

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4462...

Memory corruption

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4462...

Code injection

dyld in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly handle overlapping segments in Mach-O executable files, which allows local users to bypass intended code-signing restrictions via a crafted file...

Memory corruption

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4452...

Information disclosure

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

Code injection

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

CVE-2014-4452

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4462...

CVE-2014-4462

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4452...

CVE-2014-4455

CVE-2014-4455 concerns a Mach-O segment overlap handling bug in dyld (iOS before 8.1.1 and Apple TV before 7.0.2) that lets a local user bypass code-signing restrictions via a crafted file. The root cause is improper validation of overlapping Mach-O segments, enabling unsigned code execution. The...

CVE-2014-4460

CVE-2014-4460 affects CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1. The root issue is that private-browsing transitions do not properly clear the browsing cache, enabling physically proximate attackers to read cached data. The vulnerability is tracked publicly with a low CVSS score...

CVE-2014-4462

CVE-2014-4462 affects WebKit used in Apple iOS before 8.1.1 and Apple TV before 7.0.2. The flaw allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption and an application crash. It is a separate vulnerability from CVE-2014-44...