CVE-2012-0590

CVE-2012-0590 is an XSS vulnerability in WebKit as used by Apple iOS before 5.1. The issue arises from a drag-and-drop operation that can allow a user-assisted remote attacker to inject arbitrary script/HTML. The provided connected documents identify the affected components (WebKit/Apple Safari s...

CVE-2012-0629

CVE-2012-0629 concerns WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption–related DoS via a crafted website, and is noted as a different vulnerability from other WebKit CVEs in Apple advis...

CVE-2012-0622

Technical details about CVE-2012-0622 are not publicly available in the provided connected documents. Monitor for updates; current sources reference WebKit/iOS Safari vulnerabilities in general, but no explicit, verifiable details for this CVE are present.

CVE-2011-2833

CVE-2011-2833 affects WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. A crafted web site could cause remote code execution or memory corruption leading to an application crash. The initial description does not specify root cause details, affected components beyond WebKit, or concre...

CVE-2012-0607

Technical details about CVE-2012-0607 are not provided in the connected documents. No product/component/version/impact/fix specifics are present here. Monitor for updates from official advisories.

CVE-2012-0620

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0587

Cross-site scripting XSS vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0586, CVE-2012-0588, and CVE-2012-0589...

CVE-2012-0606

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2011-2833

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0644

Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture...

CVE-2012-0595

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0602

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0603

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0626

WebKit vulnerability CVE-2012-0626 affects Apple iOS (before 5.1) and iTunes (before 10.6). A crafted web site can trigger memory corruption in WebKit, leading to remote code execution or a denial of service (application crash). The description does not specify exact vulnerable component versions...

CVE-2012-0615

CVE-2012-0615 affects WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption leading to an application crash. The description does not specify af...

CVE-2012-0587

Technical details about CVE-2012-0587 are not provided in the connected documents. OpenVAS entries reference the CVE among others but do not disclose affected products, versions, or fixes. Monitor for updates.

CVE-2012-0623

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0632

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0586

Cross-site scripting XSS vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0587, CVE-2012-0588, and CVE-2012-0589...

CVE-2012-0645

Apple iOS: CVE-2012-0645 describes a design issue where Siri on the lock screen could forward an active Mail.app message, bypassing the lock. Affected: iOS prior to 5.1. Cause: Siri’s lock-screen forwarding restrictions allowed access to an active message when Mail was open behind the lock. Impac...