PT-2014-4067

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Description The issue concerns the Photos Backend in Apple iOS, where it fails to properly manage the asset-library cache during deletions. This allows physically proximate attackers to obtain sensitive photo da...

PT-2014-4060

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Description The issue allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call. Recommendations For versions prior to 7.1, upda...

PT-2014-4059

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows attackers to bypass code-signing requirements by leveraging the use of text-relocation instructions in a dynamic library. Recommendations For Apple iOS...

PT-2014-4064

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows local users to gain privileges or cause a denial of service, resulting in out-of-bounds memory access and device crash, via a crafted call to the ptmx...

CVE-2014-1278: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ptmxgetioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to gain privileges or cause a denial of service out-of-bounds memory access and device crash via a crafted call...

CVE-2014-1294: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

Apple iOS < 7.1 Multiple Vulnerabilities

Binary data 8155.prm...

Apple iOS 7.x < 7.0.6 / 6.x < 6.1.6 Information Disclosure

Binary data 8135.prm...

Google Chrome for Apple iOS < 33.0.1750.14 Unspecified Security Vulnerability

Binary data 8134.prm...

Apple iOS 7.x < 7.0.6 'SSLVerifySignedServerKeyExchange' Certificate Validation Weakness

Binary data appleios706check.nbin...

Apple iOS 6.x < 6.1.6 'SSLVerifySignedServerKeyExchange' Certificate Validation Weakness

Binary data appleios616check.nbin...

CVE-2014-1266

The SSLVerifySignedServerKeyExchange function in libsecurityssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a...

Design/Logic Flaw

The SSLVerifySignedServerKeyExchange function in libsecurityssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a...

CVE-2014-1266

The SSLVerifySignedServerKeyExchange function in libsecurityssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a...

CVE-2014-1266

CVE-2014-1266 affects Apple iOS (6.x before 6.1.6, 7.x before 7.0.6), Apple TV (6.x before 6.0.2), and OS X (10.9.x before 10.9.2). The Secure Transport SSLVerifySignedServerKeyExchange function fails to properly verify the TLS Server Key Exchange signature, allowing MITM attackers to spoof an SS...

PT-2014-4052 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iOS versions 6.0 through 6.1.5 Apple iOS version 7.0 through 7.0.5 Apple TV version 6.0 through 6.0.1 Apple OS X version 10.9 through 10.9.1 Description: The issue concerns the SSLVerifySignedServerKeyExchange function, which fails to...

CVE-2014-1266: Improper Certificate Validation

The SSLVerifySignedServerKeyExchange function in libsecurityssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a...

CVE-2014-2019

The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associate this service with a different Apple ID account, by entering an arbitrary...

Design/Logic Flaw

The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associate this service with a different Apple ID account, by entering an arbitrary...

Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities

Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities Document Title: =============== Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1168 Release Date: ============= 2013-12-11...