CVE-2014-1290

CVE-2014-1290 affects WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. It is described as a distinct issue from CVE-2014...

CVE-2014-1292

Technical details for CVE-2014-1292 are not publicly provided in the connected documents. The materials reference the WebKit vulnerability affecting Apple iOS before 7.1 and Apple TV before 6.1, but do not include explicit affected versions, impact specifics, or fixes.

CVE-2014-1294

CVE-2014-1294 affects WebKit as used in Apple iOS prior to 7.1 and Apple TV prior to 6.1. A crafted website can trigger remote code execution or a denial of service through memory corruption, causing an application crash. This entry is related to other CVEs in the same family (e.g., CVE-2014-1289...

CVE-2014-1273

CVE-2014-1273 affects Apple iOS before 7.1 and Apple TV before 6.1. The issue in dyld arises from loading text relocation instructions in dynamic libraries, allowing bypass of code-signing requirements. Apple’s 7.1/6.1 updates address this by ignoring text relocation instructions during dynamic l...

CVE-2014-1278

The CVE-2014-1278 entry concerns an out-of-bounds memory access in the ARM kernel ptmx_get_ioctl function on Apple iOS (pre-7.1) and Apple TV (pre-6.1). This local-privilege/escalation vulnerability could allow a local user to gain privileges or cause a denial of service via a crafted call. Affec...

CVE-2014-1293

CVE-2014-1293 affects WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1, where a crafted web site could allow a remote attacker to execute arbitrary code or cause a memory corruption/denial-of-service via memory corruption and application crash. The connected SUSE/Security entry conf...

CVE-2014-1281

CVE-2014-1281 affects Apple iOS prior to 7.1, specifically the Photos Backend asset-library cache handling during deletions. The issue allows physically proximate attackers to access sensitive photo data by triggering the Photos app and inspecting a transparent image beneath it. The root cause is...

CVE-2014-1281

Photos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during deletions, which allows physically proximate attackers to obtain sensitive photo data by launching the Photos app and looking under a transparent image...

CVE-2014-1275

Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JPEG2000 data in a PDF document...

CVE-2013-5133

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

CVE-2014-1272

CVE-2014-1272 affects Apple iOS before 7.1 and Apple TV before 6.1, in CrashHouseKeeping (Crash Reporting). The issue allows a local user to change arbitrary file permissions by leveraging a symlink, due to following symbolic links when altering permissions. Impact is local privilege-related with...

PT-2014-3208

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Description The issue allows remote attackers to obtain telephone number or e-mail address information without user confirmation for FaceTime audio calls when Safari is used, via a facetime-audio: URL...

PT-2014-4071

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Description The issue allows remote attackers to cause a denial of service, resulting in a lock-screen hang, by leveraging a state-management error in the SpringBoard Lock Screen. Recommendations For versions...

CVE-2014-1280: Undefined Security Weakness

Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service NULL pointer dereference and device hang via a crafted video file with MPEG-4 encoding...

CVE-2014-1294: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

CVE-2014-1293: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

CVE-2014-1289: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293...

CVE-2014-1292: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1293...

CVE-2014-1282: Undefined Security Weakness

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...

CVE-2013-5133: Undefined Security Weakness

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...