CVE-2012-0641

CVE-2012-0641 affects CFNetwork in Apple iOS prior to 5.1. Root cause: improper construction of request headers during URL parsing, enabling exposure of sensitive information via a malformed URL. Impact per the advisory: information disclosure. Metrics (NVD) show a network attack vector with low ...

CVE-2012-0629

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0621

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0591

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0623

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0595

CVE-2012-0595 concerns WebKit used in Apple iOS prior to 5.1 and iTunes prior to 10.6. The initial description states that a crafted website can trigger remote code execution or a memory corruption-based denial of service, potentially crashing the application. Connected documents list this CVE in...

CVE-2012-0586

Technical details about CVE-2012-0586 are not publicly available in the provided documents. Monitor for updates from vendors and published advisories.

CVE-2011-2868

Technical details for CVE-2011-2868 are not publicly available in the provided connected documents; monitor for updates.

CVE-2012-0620

CVE-2012-0620 : WebKit used in Apple iOS before 5.1 and iTunes before 10.6 is affected. A crafted web site can lead to remote code execution or memory corruption and application crash. The initial description states the impact and affected components but provides no explicit remediation, patch ve...

CVE-2012-0627

Technical details for CVE-2012-0627 are not publicly available in the provided documents. No product version, vulnerable component, impact, or remediation is specified here; monitor for updates and next disclosures.

CVE-2012-0642

The CVE-2012-0642 entry concerns an integer underflow in Apple iOS prior to 5.1 related to handling of HFS catalog files inside an image. The vulnerability could allow a remote attacker to execute arbitrary code or cause a device crash via a crafted catalog file in an HFS disk image. Affected pro...

CVE-2012-0599

CVE-2012-0599 is tied to WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. A crafted website could lead to remote code execution or a denial of service through memory corruption, with crashes reported. The connected OpenVAS entry marks this CVE among broader WebKit/WebKit-related vul...

CVE-2011-2869

CVE-2011-2869 affects WebKit as used in Apple iOS (pre-5.1) and iTunes (pre-10.6) . The vulnerability arises in how WebKit handles crafted web content, leading to possible remote code execution or a denial of service via memory corruption and application crash. The entry indicates a single CVE wi...

CVE-2011-2873

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0615

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0616

Technical details for CVE-2012-0616 are not publicly provided in the connected documents. Monitor for updates.

CVE-2012-0632

CVE-2012-0632 concerns WebKit as used in Apple iOS prior to 5.1 and iTunes prior to 10.6. A crafted website could remotely trigger memory corruption leading to arbitrary code execution or an application crash. The description specifies memory corruption and a crash as potential impacts, indicatin...

CVE-2012-0645

Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient...

CVE-2012-0646

Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file...

CVE-2012-0630

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...