PT-2014-5839

The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4419,...

PT-2014-5827

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description A race condition in iMessage allows attackers to obtain sensitive information by leveraging the presence of an attachment after the deletion of its parent iMessage or MMS. Recommendations For Apple iOS...

PT-2014-5834

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue concerns the 802.1X subsystem, which does not enforce strong authentication methods. This allows remote attackers to calculate credentials by offering LEAP...

PT-2014-5836

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description The issue allows physically proximate attackers to launch unintended calls by speaking a telephone number, as Voice Dial is enabled during all upgrade actions. Recommendations For versions prior to 8,...

PT-2014-5841

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue allows attackers to cause a denial of service, resulting in a NULL pointer dereference and device restart, via a crafted application. This is related to the...

PT-2014-5843

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description A double free issue exists, allowing local users to gain privileges or cause a denial of service, resulting in a device crash, through vectors related to Mach ports...

PT-2014-5848

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue is related to the IOHIDFamily kernel extension, which lacks proper bounds checking on write operations. This allows attackers to execute arbitrary code in the...

PT-2014-5846

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue allows remote attackers to obtain sensitive information or cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted PDF...

PT-2014-5882

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue is related to improper validation of IODataQueue object metadata in IOKit. This allows attackers to execute arbitrary code in a privileged context via an...

PT-2014-5869

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service via an application that provides crafted key-mapping properties...

PT-2014-5871

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue is related to the improper initialization of kernel memory in IOKit. This allows attackers to obtain sensitive memory-content information by making crafted IOKit...

CVE-2014-4422: Undefined Security Weakness

The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space process to observe data related to the random numbe...

CVE-2014-4363: Undefined Security Weakness

Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via 1 an http web site, 2 an https web site with an unacceptable X.509 certificate, or 3 an IFRAME element...

PT-2014-5826

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description The issue concerns the Address Book in Apple iOS, which relies on the hardware UID for its encryption key. This makes it easier for physically proximate attackers to obtain sensitive information by...

PT-2014-5835

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Description The issue concerns the Mail application in Apple iOS, which does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server. This allows remote attackers to obtain sensitive cleartext informati...

CVE-2014-4404

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assess...

Apple iOS < 8 Multiple Vulnerabilities

Binary data appleios80check.nbin...

PT-2014-5885

The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...

PT-2014-5850

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8 Apple TV versions prior to 7 Description The issue allows man-in-the-middle attackers to spoof a device's update status. This is achieved via a crafted Last-Modified HTTP response header. Recommendations For Apple...

CVE-2014-4369: Undefined Security Weakness

The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service NULL pointer dereference and device crash via an application that uses crafted arguments...