4800 matches found
CVE-2014-1362
CVE-2014-1362 affects WebKit as used in Apple iOS prior to 7.1.2, Safari prior to 6.1.5 and 7.x prior to 7.0.5, and Apple TV prior to 6.1.2. The vulnerability enables remote attackers to cause memory corruption, leading to arbitrary code execution or a denial of service via a crafted web site. Th...
CVE-2014-1363
WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...
CVE-2014-1349
CVE-2014-1349 affects Safari on Apple iOS before 7.1.2. The vulnerability is a use-after-free in Safari’s handling of invalid URLs, allowing remote attackers to cause an app crash or potentially execute arbitrary code. The Apple advisory (iOS 7.1.2) documents a set of fixes; for this CVE, upgrade...
CVE-2014-1351
CVE-2014-1351 affects Apple iOS prior to 7.1.2. On the lock screen, a Siri request that references a contact ambiguously could cause Siri to display a contact list without the passcode, bypassing the lock-screen requirement and exposing contacts. Root cause: Siri on the lock screen can reveal the...
CVE-2014-1356
CVE-2014-1356 is a heap buffer overflow in launchd’s handling of IPC messages that could allow arbitrary code execution with system privileges. Affected: iOS 7.1.2, OS X 10.9.4, and Apple TV 6.1.2. Root cause: improved bounds checking addressed the issue. Remediation: apply the corresponding Appl...
CVE-2014-1364
CVE-2014-1364 affects WebKit as used in Apple iOS up to 7.1.2, Safari up to 6.1.5 and 7.x up to 7.0.5, and Apple TV up to 6.1.2. A crafted web site can cause remote code execution or memory corruption leading to a crash (DoS). Root cause: memory corruption in WebKit. Exploitation is not detailed ...
CVE-2014-1365
CVE-2014-1365 affects WebKit as used in Apple iOS before 7.1.2, Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) through a crafted websit...
CVE-2014-1345
Removed by vendor...
CVE-2014-1352
Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...
CVE-2014-1352
CVE-2014-1352 affects Apple iOS before 7.1.2. The vulnerability is in the Lock Screen, where the limit on failed passcode attempts was not properly enforced, enabling brute-force passcode-guessing attacks by a person with physical access. The issue is mitigated in Apple’s iOS 7.1.2 release, which...
CVE-2014-1363
The CVE-2014-1363 issue involves WebKit as used in Apple software (iOS prior to 7.1.2; Safari prior to 6.1.5 and 7.x prior to 7.0.5; Apple TV prior to 6.1.2). The vulnerability affects the WebKit component and is triggered via a crafted web site, enabling remote attackers to execute arbitrary cod...
CVE-2014-1350
CVE-2014-1350 affects Apple iOS prior to 7.1.2. The issue stems from incorrect state management of the Find My iPhone (iCloud) state, allowing physically proximate attackers to bypass the iCloud password requirement and turn off Find My iPhone. Supported in the iOS 7.1.2 update, which addresses m...
CVE-2014-1366
CVE-2014-1366 affects WebKit used in Apple iOS before 7.1.2, Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2. Description: remote attackers could execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption and application crash. Root cause...
PT-2014-4143
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in...
PT-2014-4139
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple OS X versions prior to 10.9.4 Apple TV versions prior to 6.1.2 Description The issue is caused by an integer underflow in launchd, which allows attackers to execute arbitrary code via a crafted...
PT-2014-4147
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Apple iTunes affected versions not specified Description The issue allows remote attackers to execute arbitrary code...
PT-2014-4141
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple OS X versions prior to 10.9.4 Apple TV versions prior to 6.1.2 Description The issue allows remote attackers to obtain potentially sensitive information from uninitialized process memory by providing a...
PT-2014-4148
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Apple iTunes affected versions not specified Description The issue allows remote attackers to execute arbitrary code...
Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities
No description provided by source. Document Title: =============== Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1153 Release Date: ============= 2013-12-02 Vulnerability Laboratory ID VL-ID:...