CVE-2013-5150

CVE-2013-5150 is a Safari history-clearing flaw affecting Apple iOS prior to 7, where clearing a tab’s history did not clear the back/forward history for that open tab. The issue enables physically proximate attackers with access to an unattended workstation to potentially view sensitive informat...

PT-2013-2831

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. Recommendations For Apple iOS...

PT-2013-5373

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. Recommendations For Apple iOS...

PT-2013-5386

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows remote attackers to cause a denial of service, leading to an assertion failure and device restart, via an invalid packet fragment. Recommendations For versions prior to 7, update to...

PT-2013-5387

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue is related to an integer truncation vulnerability, where the kernel uses an incorrect data size for a certain integer variable. This allows attackers to cause a denial of service, resulting i...

PT-2013-5399

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows attackers to bypass intended access restrictions by crafting an application that takes advantage of the Sandbox subsystem's behavior of determining sandboxing requirements based on the...

PT-2013-5400

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows attackers to cause a denial of service, specifically an infinite loop, by writing crafted values to /dev/random via an application. Recommendations For Apple iOS versions prior to 7,...

PT-2013-5403

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue concerns the Social subsystem in Apple iOS, which fails to properly restrict access to the cache of Twitter icons. This allows physically proximate attackers to obtain sensitive information...

PT-2013-5402

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue concerns the Twitter subsystem in Apple iOS, which does not enforce API conformity for access to Twitter daemon interfaces. This allows attackers to post Tweets by using a crafted app that...

CVE-2013-1044: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-5125: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-5127: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-5151: Improper Neutralization of Input During Web Page Generation

Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content type, which allows remote attackers to conduct cross-site scripting XSS attacks by uploading a file...

CVE-2013-5158: Undefined Security Weakness

The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors...

CVE-2013-5140: Improper Input Validation

The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service assertion failure and device restart via an invalid packet fragment...

CVE-2013-1040: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-1038: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2011-2391: Improper Input Validation

The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service CPU consumption via crafted ICMPv6 packets...

CVE-2013-5152: Improper Input Validation

Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site...

CVE-2013-1047: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...