Memory corruption

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving form menus...

Memory corruption

ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted TIFF file...

Memory corruption

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving HTML object outlines...

Double free

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the rendering of an inline element...

CVE-2010-1814

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving form menus...

CVE-2010-1815

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving scrollbars...

Information disclosure

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

CVE-2010-1812

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving selections...

CVE-2010-1781

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the rendering of an inline element...

CVE-2010-1809

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

CVE-2010-1815

CVE-2010-1815 is listed in MiracleLinux AXSA:2011-34:01 as part of a set of WebKitGTK+ related issues. The included description block confirms a WebKit use-after-free vulnerability affecting WebKit in Apple iOS prior to 4.1 and webkitgtk prior to 1.2.6, with potential remote code execution or den...

CVE-2010-1812

The connected MiracleLinux advisory AXSA:2011-34:01 references CVE-2010-1812 (Use-after-free in WebKit) affecting WebKitGTK+ and webkitgtk-1.2.6-2.AXS4. The vulnerability allows remote code execution or a denial of service via selections, described alongside other WebKit issues; the advisory indi...

CVE-2010-1781

CVE-2010-1781 is a double‑free vulnerability in WebKit used by Apple iOS prior to 4.1 (on iPhone/iPod touch). Exploitation could allow remote code execution or cause a denial of service via rendering of an inline element. The initial description is supported by multiple connected advisories, e.g....

CVE-2010-1810

CVE-2010-1810 affects FaceTime on Apple iOS prior to 4.1 (iPhone/iPod touch). The issue is that invalid X.509 certificates are not handled properly, which can enable a man-in-the-middle to redirect calls with a crafted certificate. The vulnerability is tied to the handling of TLS/SSL certificates...

CVE-2010-1813

Removed by vendor...

CVE-2010-1817

CVE-2010-1817 describes a buffer overflow in ImageIO on Apple iOS prior to 4.1, exploitable via a crafted GIF file to allow remote code execution or cause a denial of service. Affected software: Apple iOS devices (iPhone/iPod touch) with ImageIO before 4.1. Root cause: overflow in GIF handling wi...

CVE-2010-1814

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving form menus...

CVE-2010-1809

The CVE-2010-1809 entry concerns Apple iOS prior to 4.1, specifically the Accessibility VoiceOver feature failing to announce the location services icon on iPhone/iPod touch. The underlying issue is tied to the Accessibility component and VoiceOver handling, with impact and attack vectors not exp...

CVE-2010-1813

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving HTML object outlines...

CVE-2010-1814

MiracleLinux AXSA:2011-34:01 documents CVE-2010-1814 as one of several WebKitGTK+ vulnerabilities. Affected package: webkitgtk-1.2.6-2.AXS4. The advisory indicates these issues are fixed in that release and lists multiple CVEs addressed, including CVE-2010-1814. Remediation is to upgrade to the r...