CVE-2014-4452

CVE-2014-4452 affects WebKit used in Apple iOS prior to 8.1.1 and Apple TV prior to 7.0.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service (via memory corruption) through a crafted web site. The root cause is memory corruption in WebKit referenced...

PT-2014-5916

Name of the Vulnerable Software and Affected Versions dyld in Apple iOS versions prior to 8.1.1 dyld in Apple TV versions prior to 7.0.2 Description The issue allows local users to bypass intended code-signing restrictions by using a crafted file that takes advantage of improper handling of...

PT-2014-5914

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Apple TV versions prior to 7.0.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web...

Apple iOS < 8.1.1 Multiple Vulnerabilities

Binary data appleios811check.nbin...

PT-2014-5922

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Apple TV versions prior to 7.0.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web...

PT-2014-5915

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Apple OS X versions prior to 10.10.1 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors, as location data is included during the establishment of a Spotlight...

CVE-2014-4462: Undefined Security Weakness

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4452...

CVE-2014-4451: Undefined Security Weakness

Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses...

CVE-2014-4461: Improper Input Validation

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

CVE-2014-4453: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote attackers to obtain sensitive information via unspecified vectors...

CVE-2014-4457: Undefined Security Weakness

The Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly implement the debugserver sandbox, which allows attackers to bypass intended binary-execution restrictions via a crafted application that is run during a time period when debugging is not enabled...

CVE-2014-4455: Undefined Security Weakness

dyld in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly handle overlapping segments in Mach-O executable files, which allows local users to bypass intended code-signing restrictions via a crafted file...

CVE-2014-4452: Undefined Security Weakness

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4462...

CVE-2014-4460: Exposure of Sensitive Information to an Unauthorized Actor

CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1 does not properly clear the browsing cache upon a transition out of private-browsing mode, which makes it easier for physically proximate attackers to obtain sensitive information by reading cache files...

CVE-2014-4463: Undefined Security Weakness

Apple iOS before 8.1.1 allows physically proximate attackers to bypass the lock-screen protection mechanism, and view or transmit a Photo Library photo, via the FaceTime "Leave a Message" feature...

PT-2014-5921

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Apple TV versions prior to 7.0.2 Description The issue is related to the improper validation of IOSharedDataQueue object metadata in the kernel. This allows attackers to execute arbitrary code in a privileged...

PT-2014-5920

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Apple OS X versions prior to 10.10.1 Description The issue allows physically proximate attackers to obtain sensitive information by reading cache files because the browsing cache is not properly cleared when...

Apple iOS v8.0.2 - Silent Contact Denial of Service Vulnerability

Document Title: =============== Apple iOS v8.0.2 - Silent Contact Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1324 Video: http://www.vulnerability-lab.com/getcontent.php?id=1333 Article:...

Apple iOS multiple security vulnerabilities

Unauthorized bluetooth access, insufficient encryption, insufficient certificate check, information leakage, SSL poodle attack...

Apple iOS v8.0.2 - Silent Contact DoS Vulnerability

Document Title: =============== Apple iOS v8.0.2 - Silent Contact DoS Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1333 View: https://www.youtube.com/watch?v=drf0TpEoIl0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1324 Release Date:...