CVE-2014-4389: Undefined Security Weakness

Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments...

CVE-2014-4372: Improper Link Resolution Before File Access

syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permissions of arbitrary files via a symlink attack on an unspecified file...

CVE-2014-4367: Undefined Security Weakness

Apple iOS before 8 enables Voice Dial during all upgrade actions, which makes it easier for physically proximate attackers to launch unintended calls by speaking a telephone number...

CVE-2014-4404: Out-of-bounds Write

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties...

CVE-2014-4357: Exposure of Sensitive Information to an Unauthorized Actor

Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by reading log data that was not intended to be present in a log...

CVE-2014-4356: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain sensitive information by reading this screen...

CVE-2014-4352: Undefined Security Weakness

Address Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID...

Apple iOS 7.1.2 Merge Apps Service Local Bypass Vulnerability

Apple iOS version 7.1.2 suffered from a merge apps service local bypass vulnerability. Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability Product & Service Introduction: =============================== iOS previously iPhone OS is a mobile operating...

Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1281 Video: https://www.youtube.com/watch?v=9gBtJ5tyRgI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1280 Vulnerabili...

Apple iOS v7.1.2 - (Merge Apps) Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 iPhone - Merge App Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1281 Video: https://www.youtube.com/watch?v=9gBtJ5tyRgI Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1280 Vulnerabili...

Apple iOS multiple security vulnerabilities

Повреждения памяти, DoS, обход ограничений...

Apple iOS < 8.0 Multiple Vulnerabilities

Binary data 8393.prm...

Apple iOS 7.x < 7.1.2 Multiple Vulnerabilities

Binary data 8322.prm...

CVE-2014-1368

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1348

Mail in Apple iOS before 7.1.2 advertises the availability of data protection for attachments but stores cleartext attachments under mobile/Library/Mail/, which makes it easier for physically proximate attackers to obtain sensitive information by mounting the data partition...

CVE-2014-1352

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...

CVE-2014-1358

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1364

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1350

Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management...