4490 matches found
Apple iOS 5 Released - Download Now !
Apple iOS 5 Released ! Apple's iOS 5 has been released, with owners of the iPhone 4, iPhone 3GS, iPad and iPad 2, along with the third- and fourth-gen iPod touch all getting the latest version of the mobile platform as a free update. Available to download for existing devices via iTunes, iOS 5 wi...
Apple iOS < 5.0 Multiple Vulnerabilities
Binary data 6041.prm...
FreeBSD Ports: freetype2
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Apple iOS < 7.0 Multiple Vulnerabilities
Binary data 8013.prm...
EUVD-2011-0254
The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...
CVE-2011-0228: Improper Input Validation
The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...
Apple iOS "basicConstraints" X.509证书链验证漏洞
CVE ID: CVE-2011-0228 Apple iOS是运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS "basicConstraints" X.509在在实现上存在欺骗漏洞，远程用户可利用此漏洞执行欺骗攻击。 此漏洞源于在验证证书链中的证书"basicConstraints"参数时存在错误，通过中间人攻击，可欺骗任意域中的证书并泄露加密信息。 Apple iOS 4.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...
Apple iOS (iOS) security vulnerabilities
Privilege escalation, code execution via PDF documents...
Apple iOS < 4.2.10 / 4.3.x < 4.3.5 Data Security Certificate Verification
Binary data 5993.prm...
CVE-2011-0227
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application...
Type confusion
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application...
CVE-2011-0227
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application...
CVE-2011-0226
The FreeType font rendering engine is vulnerable to an integer signedness error in psaux/t1decode.c affecting versions prior to 2.4.6 . This flaw allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by processing a crafted Type 1...
CVE-2011-0226
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...
CVE-2011-0227
The IOMobileFrameBuffer component in Apple iOS is vulnerable to an invalid type conversion issue within its queueing primitives. This flaw allows a local attacker to run malicious code as a user to gain system privileges via a crafted application. The vulnerability affects iOS before 4.2.9 and iO...
CVE-2011-0226
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...
VulnCheck KEV: CVE-2011-0226
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...
CVE-2011-0227: Undefined Security Weakness
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application...
Apple iOS < 4.3.4 Multiple Vulnerabilities
Binary data 5986.prm...
Apple iOS Postscript Type字体处理缓冲区溢出漏洞
Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Jailbreakme 3 PDF 越狱使用Apple iOS操作系统中处理Postscript Type又称Adobe Type 1字体的一个缓冲区溢出漏洞，漏洞存在于t1decoderparsecharstrings函数，该函数用于解码Type 1字体文件中编码过的CharStrings字段。越狱漏洞中使用的字体文件中包含了一个351字节的特殊CharStrings的字段，当该函数处理这个特殊的...