FreeBSD Ports: freetype2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apple iOS Libinfo组件信息泄露漏洞

BUGTRAQ ID: 50641 CVE ID: CVE-2011-3441 Apple iOS是运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS在实现上存在信息泄露漏洞，攻击者可利用此漏洞获取敏感信息，此漏洞影响Libinfo组件。 0 Apple MacOS X Server 10.x Apple iOS 4.x Apple iOS 3.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

freetype: Multiple security flaws when loading CID-keyed Type 1 fonts

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font in a document...

Apple iOS Lockdown Detection

The lockdown service, part of Apple iOS, was detected on the remote host. This service is used to communicate with iOS devices for several tasks e.g., Wi-Fi sync. Note that this plugin will only work against devices that have ever had Wi-Fi sync enabled iOS versions 5 and later. C Tenable Network...

Apple iOS 7.x < 7.0.3 Multiple Vulnerabilities

Binary data 8057.prm...

Apple iOS 7.x < 7.0.4 Purchases Authentication Bypass

Binary data 8058.prm...

Apple iOS 7.x < 7.0.2 Multiple Vulnerabilities

Binary data 8054.prm...

Apple iOS CFNetwork敏感信息泄露漏洞

CVE ID：CVE-2011-3246 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 CFNetwork处理恶意特制URL存在问题，当访问特制的HTTP或HTTPS URL时，CFNetwork会导航到不正确的服务器上。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Apple iOS代码签名检查漏洞

CVE ID：CVE-2011-3442 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 mmap系统调用对合法标记组合检查存在逻辑错误，此问题可导致绕过代码签名检查。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Apple iOS libinfo信息泄露漏洞

CVE ID：CVE-2011-3441 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 libinfo处理DNS名查询存在问题，当解析恶意特制的主机名时，libinfo可返回不正确的结果。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Apple iOS FreeType处理多个内存破坏漏洞

BUGTRAQ ID: 50643 CVE ID: CVE-2011-3439 Apple iOS是运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS在FreeType处理的实现上存在多个内存破坏漏洞，远程攻击者可利用这些漏洞执行任意代码，可能造成拒绝服务。 Apple iOS 4.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

Hidden Apple iOS 5 Autocorrect Keyboard Bar Found by Researcher

In the month since Apple’s release of iOS 5, a handful of features and workarounds have been found hidden beneath the mobile operating system’s surface. A few days ago, another feature was added to that list – an autocorrect keyboard bar. According to 9to5Mac, the “Android-like” feature allows...

CVE-2011-3441

libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname...

CVE-2011-3442

The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app...

CVE-2011-3440

The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation...

CVE-2011-3439

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font in a document...

CVE-2011-3439

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font in a document...

Design/Logic Flaw

libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname...

Memory corruption

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font in a document...

Design/Logic Flaw

The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation...