CVE-2011-0159: Improper Input Validation

The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie...

CVE-2011-1418: Exposure of Sensitive Information to an Unauthorized Actor

The stateless address autoconfiguration aka SLAAC functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses...

CVE-2011-0157: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

Apple iOS < 4.3 Multiple Vulnerabilities

Binary data 5814.prm...

CVE-2011-0154

WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort function for JavaScript arrays, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related t...

Veracode Announces Mobile App Verification Service

Application testing firm Veracode said on Wednesday that it was expanding its service to vet the security of mobile applications to cover Apple iPhone and Google Android devices. In a statement, Veracode said it was accepting submissions of mobile applications for testing for all mobile platforms...

Apple iOS Safari - 'JS .' Remote Crash

Apple iPhone 3 Safari JavaScript - dot / '.' Remote Crash . = '$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - JS . Remote Crash

Apple iOS Safari - JS . Remote Crash Apple iPhone 3 Safari JavaScript - dot / '.' Remote Crash . = '$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - decodeURIComponent Remote Crash

Apple iOS Safari - decodeURIComponent Remote Crash Apple iPhone 3 Safari JavaScript - decodeURIComponent Remote Crash decodeURIComponent'$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - 'decodeURIComponent' Remote Crash

Apple iPhone 3 Safari JavaScript - decodeURIComponent Remote Crash decodeURIComponent'$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - decodeURI Remote Crash

Apple iOS Safari - decodeURI Remote Crash Apple iPhone 3 Safari JavaScript - decodeURI Remote Crash decodeURI'$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - 'decodeURI' Remote Crash

Apple iPhone 3 Safari JavaScript - decodeURI Remote Crash decodeURI'$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Apple iOS Safari - body alink Remote Crash

Apple iOS Safari - body alink Remote Crash ----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page...

CVE-2010-4012

CVE-2010-4012 affects Apple iOS 4.0–4.1 on iPhone 3G and later. A race condition on the Emergency Call screen allows physically proximate attackers to bypass the device passcode by initiating a call, then quickly pressing Sleep/Wake. The impact is bypassing the lock screen; exploitation details b...

CVE-2010-4012

Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button...

CVE-2010-4012: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button...

CVE-2010-3828

iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad...

CVE-2010-3829

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to...

CVE-2010-3832

Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity TMSI field...

CVE-2010-3827

Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors...