PT-2013-4755

Name of the Vulnerable Software and Affected Versions dyld in Apple iOS versions 5.1.x through 6.1.3 Description A stack-based buffer overflow issue exists in the openSharedCacheFile function in dyld.cpp, which can be exploited by attackers using a long string in the DYLD SHARED CACHE DIR...

PT-2013-4760

Name of the Vulnerable Software and Affected Versions Apple iOS versions 5.x through 6.1.3 Description The issue is related to the get xattrinfo function in the XNU kernel, which does not properly validate the header of an AppleDouble file. This could allow local users to cause a denial of servic...

CVE-2013-3951: Improper Input Validation

sys/openbsd/stackprotector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings employed in the user-space stack-cookie implementation, which allows local users to bypass cookie randomization by executing a program with a call-path beginning with the...

CVE-2013-3948: Improper Input Validation

Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployment installation dialog, which makes it easier for remote attackers to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that leverages a...

CVE-2013-3955: Improper Input Validation

The getxattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service memory corruption or have unspecified other impact via an invalid file on an...

Malicious Mobile Charger can Hack your iPhone within a minute

You might want to be a little more careful the next time you pick up a cheap knock-off accessory for your device to save a few bucks because new hardware hacks could be the next big thing among cyber criminals. Researchers say they've built a custom iPhone wall charger that can Install malware in...

Malicious Mobile Charger can Hack your iPhone within a minute

You might want to be a little more careful the next time you pick up a cheap knock-off accessory for your device to save a few bucks because new hardware hacks could be the next big thing among cyber criminals. Researchers say they've built a custom iPhone wall charger that can Install malware in...

Wifi Photo Transfer 2.1 / 1.1 PRO LFI / XSS / Command Injection

Title: ====== Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities Date: ===== 2013-04-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=932 VL-ID: ===== 932 Common Vulnerability Scoring System: ==================================== 6.1 Introduction: ===========...

CVE-2013-0979

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink...

CVE-2013-0978

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code...

CVE-2013-0980

The Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging an error in the emergency-call feature...

Design/Logic Flaw

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments...

Design/Logic Flaw

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink...

Privilege escalation

The Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging an error in the emergency-call feature...

Code injection

The IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 accesses pipe object pointers that originated in userspace, which allows local users to gain privileges via crafted code...

CVE-2013-0978

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code...

CVE-2013-0979

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink...

CVE-2013-0981

The IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 accesses pipe object pointers that originated in userspace, which allows local users to gain privileges via crafted code...

CVE-2013-0978

CVE-2013-0978 affects the ARM prefetch abort handler in the kernel of Apple iOS (pre-6.1.3) and Apple TV (pre-5.2.1). The issue arises because the handler may not be invoked in an abort context, enabling local users to bypass ASLR via crafted code. Impact is local confidentiality/integrity exposu...

CVE-2013-0979

CVE-2013-0979 affects Apple iOS before 6.1.3, where lockdownd did not properly consider file types during permission setting in backup restorations. This allowed a local user to change permissions on arbitrary files when a backup path included a symlink. The issue is fixed in the iOS 6.1.3 securi...