CVE-2012-3725

CVE-2012-3725 affects Apple iOS: the DNAv4 protocol in the DHCP component can cause iOS to broadcast MAC addresses of previously connected networks when joining unencrypted Wi‑Fi. This could disclose prior locations/information about a device. Mitigation noted in publicly referenced Apple advisor...

CVE-2012-3734

CVE-2012-3734 affects Apple iOS Office Viewer prior to iOS 6. It enables information disclosure by writing a temporary file that contains data from viewed documents, potentially bypassing the device’s data protection or encryption state. The underlying issue is that unencrypted document data is w...

CVE-2012-3726

CVE-2012-3726 is a double-free vulnerability in ImageIO’s JPEG handling on iOS prior to iOS 6. The flaw could allow remote code execution or a denial of service via a crafted JPEG image. Public documents underlined in Apple advisories indicate the issue was addressed in the iOS 6 update; no expli...

CVE-2012-3729

CVE-2012-3729 is a kernel vulnerability in Apple iOS (pre-6) related to the Berkeley Packet Filter (BPF) interpreter. The issue is an uninitialized memory access in the kernel’s BPF path, which could allow a local attacker to read kernel memory layout information via a crafted BPF program. The vu...

CVE-2012-3737

The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value...

CVE-2012-3733

Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's sender address matches the recipient address of the original message, which allows remote attackers to obtain potentially sensitive information about alternate e-mail addresses i...

CVE-2012-3741

CVE-2012-3741 affects Apple iOS prior to version 6, where the Restrictions (Parental Controls) feature may fail to require Apple ID authentication after a Disable Restrictions action, allowing a local user to complete purchases without password verification. The issue is described in the CVE entr...

CVE-2012-3735

CVE-2012-3735 affects Apple iOS prior to 6, where the Passcode Lock display logic on the lock screen can reveal the most recently used third‑party app when the user interacts with the Slide to Power Off control. Root cause: a logic issue in lock state management. Impact: a physically proximate at...

CVE-2012-3742

The CVE-2012-3742 issue affects Safari on iOS before 6, where an unspecified Unicode look-alike of the HTTPS lock icon in a page title could mislead users into believing a connection is secure. Root cause: inadequate restriction of look-alike Unicode characters in the TITLE element, enabling spoo...

CVE-2012-3729

The Berkeley Packet Filter BPF interpreter implementation in the kernel in Apple iOS before 6 accesses uninitialized memory locations, which allows local users to obtain sensitive information about the layout of kernel memory via a crafted program that uses a BPF interface...

CVE-2012-3745

CVE-2012-3745 affects iOS before 6, in Telephony. Off-by-one error in the handling of SMS user-data headers can allow a remote attacker to trigger a denial of service via a crafted SMS, potentially causing a buffer overflow and connectivity outage. Connected documentation references the same CVE ...

CVE-2012-3732

Mail in Apple iOS before 6 uses an S/MIME message's From address as the displayed sender address, which allows remote attackers to spoof signed content via an e-mail message in which the From field does not match the signer's identity...

CVE-2012-3744

CVE-2012-3744 is an iOS Telephony vulnerability where an SMS message may spoof the sender by the message’s return address being displayed as the sender. Connected Apple security documentation confirms this CVE and indicates the issue was addressed in iOS 6 via Apple’s update, so the remediation i...

CVE-2012-3736

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

CVE-2012-3743

The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows remote attackers to obtain sensitive information via a crafted app that reads log files...

CVE-2012-3747

CVE-2012-3747 affects WebKit as used in Apple iOS before 6.0. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a crafted website, via memory corruption in WebKit leading to application crashes or code execution. Affected component: WebKit in...

CVE-2012-3728

CVE-2012-3728 is an Apple iOS kernel vulnerability. It resides in the kernel’s handling of packet-filter data structures where an invalid pointer is dereferenced, enabling a local user to gain privileges via crafted packet-filter ioctl calls. Affected: iOS

CVE-2012-3733

Affected product/technique. iOS prior to 6 with iMessage configured for multiple email addresses. Root cause. When replying to a message, the sender address could be different from the recipient address of the original, potentially allowing disclosure of alternate email addresses. Impact. Disclos...

CVE-2012-3746

UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-dependent attackers to obtain cleartext file content by leveraging direct access to a device's filesystem...

CVE-2012-3727

CVE-2012-3727 affects the iOS IPSec component. A buffer overflow in the handling of a crafted racoon configuration file could allow remote code execution. Affected product/version: Apple iOS prior to 6. Root cause: buffer overflow in racoon config handling. Impact as stated: remote arbitrary code...