Air Gallery 1.0 Air Photo Browser - Multiple Vulnerabilities

No description provided by source. Document Title: =============== Air Gallery 1.0 Air Photo Browser - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1165 Release Date: ============= 2013-12-09 Vulnerability Laboratory ID VL-ID:...

PT-2014-4128

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Description The issue concerns the storage of email attachments in Apple iOS. Although the system advertises data protection for attachments, they are actually stored in cleartext under mobile/Library/Mail/...

PT-2014-4125

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Description The issue allows remote attackers to spoof the address bar via a crafted web site, due to improper encoding of domain names in URLs...

PT-2014-4130

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Description The issue allows physically proximate attackers to bypass an intended iCloud password requirement and turn off the Find My iPhone service by leveraging incorrect state management. Recommendations F...

PT-2014-4107

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Apple iTunes affected versions not specified Description The issue allows remote attackers to execute arbitrary code...

PT-2014-4136

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple OS X versions prior to 10.9.4 Apple TV versions prior to 6.1.2 Description A heap-based buffer overflow issue exists in launchd, allowing attackers to execute arbitrary code via a crafted application tha...

PT-2014-4138

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple OS X versions prior to 10.9.4 Apple TV versions prior to 6.1.2 Description The issue is related to an integer overflow in launchd, which allows attackers to execute arbitrary code via a crafted...

PT-2014-4144

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Apple iTunes affected versions not specified Description The issue allows remote attackers to execute arbitrary code...

PT-2014-4145

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Apple iTunes affected versions not specified Description The issue allows remote attackers to execute arbitrary code...

PT-2014-4147

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Apple iTunes affected versions not specified Description The issue allows remote attackers to execute arbitrary code...

PT-2014-4141

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple OS X versions prior to 10.9.4 Apple TV versions prior to 6.1.2 Description The issue allows remote attackers to obtain potentially sensitive information from uninitialized process memory by providing a...

PT-2014-4148

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Apple iTunes affected versions not specified Description The issue allows remote attackers to execute arbitrary code...

PT-2014-4161

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in...

iOS FTP On The Go 2.1.2 - HTTP Remote DoS

No description provided by source. !/usr/bin/python Apple Iphone/Ipod - FTP On The Go 2.1.2 - HTTP Remote Denial-of-Service Attack Found by: TecR0c Homepage: http://www.ftponthego.com/ Download: From the Apple App Store - http://app2.it/topapp/286479936 Tested on: IPhone 3G - firmware 3.1.2...

PT-2014-4135

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple TV versions prior to 6.1.2 Apple OS X versions prior to 10.9.4 Description The issue allows local users to cause a denial of service, resulting in a NULL pointer dereference and reboot, via crafted API...

CVE-2014-1352: Undefined Security Weakness

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...

PT-2014-4132

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Description The issue concerns the Lock Screen in Apple iOS, where it fails to properly enforce the limit on failed passcode attempts. This makes it easier for attackers with physical access to conduct...

PT-2014-4140

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Description The issue concerns the Lockdown feature in Apple iOS, which fails to properly verify data from activation servers. This makes it easier for attackers in close physical proximity to bypass the...

PT-2014-4146

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 Apple iTunes affected versions not specified Description The issue allows remote attackers to execute arbitrary code...

CVE-2014-1345: Undefined Security Weakness

WebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not properly encode domain names in URLs, which allows remote attackers to spoof the address bar via a crafted web site...