3761 matches found
CVE-2012-3730
CVE-2012-3730 affects Apple iOS Mail prior to iOS 6, where Mail mishandles reuse of Content-ID header values, enabling spoofing of attachments in messages from different senders. Affects the Mail component within iOS; root cause is logic/handling of Content-ID reuse across messages. Impact is spo...
CVE-2012-3743
The CVE-2012-3743 entry applies to Apple iOS prior to 6, where the System Logs implementation did not restrict sandboxed apps from reading /var/log. This allowed sandboxed apps to disclose sensitive information from system logs. The described vulnerability is an information disclosure issue with ...
CVE-2012-3726
Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...
CVE-2012-3739
The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera...
Apple iOS MobileMail LibTIFF Buffer Overflow
This module exploits a buffer overflow in the version of libtiff shipped with firmware versions 1.00, 1.01, 1.02, and 1.1.1 of the Apple iPhone. iPhones which have not had the BSD tools installed will need to use a special payload. This module requires Metasploit: https://metasploit.com/download...
Apple iOS SMS伪造漏洞
Apple iOS是一款苹果公司开发的移动设备上的操作系统。 Apple iOS上的SMS存在安全漏洞，允许攻击者获取敏感信息或进行伪造攻击。 SMS消息的文本负载中，UDH User Data Header段是一个可选的，但定义了很多手机不兼容的高级功能。其中有个选项允许用户更改文本的回复地址，如果目的手机兼容此消息，并且如果接收者尝试回复文本，那么他就不会回应原来的号码，而是指定的那个。大多数运营商不会检查这部分消息，这意味着攻击者可以任意指定此段，如修改为911或其他号码。 要利用这个SMS漏洞，需要攻击者可以RAW PDU格式发送文本。 0 Apple iOS 厂商解决方案...
Researcher Finds iPhone Bug Allows SMS Spoofing
The iPhone SMS app contains a quirky bug that could allow someone to send a user a text message that appears to come from any number that the sender specifies. The researcher who discovered the bug said that it could be used by attackers to spoof messages from a bank or credit card company and se...
Apple iOS < 5.1 Multiple Vulnerabilities
Binary data appleios51check.nbin...
Are You 'Siri-less'? Security Firm Urges Closer Look at Popular Personal Assistant App
The Finland-based security firm F-Secure is warning companies to beware of Siri, the voice-activated personal assistant app that last month was banned by IBM for security purposes. The potential for Siri-based data disclosures was cited at a Helsinki press conference, in which F-Secure’s vice...
Apple iOS 5.1.1 Safari Browser - 'JS match()' / 'search()' Crash (PoC)
!/usr/bin/env ruby - Title iOS \n\ Crash PoC\n\ \n\ var s = "poc";\n\ s.match"chrbufferlen";\n\ \n\ "; def help puts "iOS = v5.1.1 Safari Browser JS match, search Crash PoC" puts "$0 -p bindport -h bindaddress --verbose" end Parsing options opts = optparser = OptionParser.new do |op| op.on"-h",...
Apple iOS multiple security vulnerabilities
URL spoofing, crossite scripting, memory corruptions...
CVE-2012-0674
Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site...
Memory corruption
WebKit in Apple iOS before 5.1.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site...
Code injection
Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site...
CVE-2012-0672
WebKit in Apple iOS before 5.1.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site...
CVE-2012-0674
Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site...
CVE-2012-0674
The CVE-2012-0674 entry concerns Safari in Apple iOS prior to 5.1.1, where a crafted website could spoof the URL in the location bar. Connected documents confirm the issue is a UI/URL spoof vulnerability in Safari (iOS) with the remediation being the iOS 5.1.1 update that fixes URL handling to pr...
CVE-2012-0672
CVE-2012-0672 affects WebKit, with the root cause being memory corruption in the WebKit component used by Apple iOS prior to 5.1.1, enabling remote code execution or denial of service via a crafted website. The connected data confirms the vulnerability is discussed across multiple advisories: App...
