CVE-2011-3261

CVE-2011-3261 is a double-free vulnerability in OfficeImport on Apple iOS, affecting OfficeImport’s handling of Excel files and leading to arbitrary code execution or a denial of service (app crash) when processing crafted Excel spreadsheets. The issue is rooted in a memory-management error (doub...

CVE-2011-3426

CVE-2011-3426 is an XSS vulnerability in Safari for iOS prior to 5, caused by Safari’s handling of files with the HTTP Content-Disposition header value “attachment.” A crafted file can execute inline scripts when opened in Safari, enabling remote script execution. Public references (e.g., JVN/JVN...

CVE-2011-3431

The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen...

CVE-2011-3246

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...

CVE-2011-3256

FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font, a different vulnerability than CVE-2011-0226...

CVE-2011-3431

CVE-2011-3431 affects Apple iOS prior to 5, where the Home screen’s four-finger app-switching gesture could disclose the previously active application state when switching between apps. The underlying issue was the system’s handling during application transitions, addressed by ensuring applicatio...

CVE-2011-3257

The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the same mail server, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging a different account's cookie...

CVE-2011-3256

FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font, a different vulnerability than CVE-2011-0226...

CVE-2011-3243

CVE-2011-3243 is a WebKit-based XSS vulnerability reported in WebKit as used by Apple iOS prior to version 5 and Safari prior to 5.1.1. The flaw involves vectors with inactive DOM windows, enabling remote attackers to inject arbitrary script or HTML. Connected sources confirm the affected scope (...

CVE-2011-3430

The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display...

CVE-2011-3260: Improper Control of Generation of Code

Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Microsoft Word document...

PT-2011-4350

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Description A buffer overflow issue in OfficeImport allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted Microsoft Word document...

PT-2011-4338

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5.0.1 Apple Mac OS X versions prior to 10.7.2 Description The issue allows remote attackers to trigger visits to unintended web sites and transmit cookies to unintended web sites via a crafted http or https URL, due...

PT-2011-4346

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via an invitation note in the Calendar application. Recommendations For Apple iOS versions prio...

PT-2011-4451

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Apple TV versions prior to 4.4 Description The issue concerns the improper restriction of the MD5 hash algorithm within X.509 certificates in the Data Security component. This makes it easier for man-in-the-middle...

PT-2011-4452

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Description The issue concerns the storage of a cleartext parental-restrictions passcode in an unspecified file by the Settings component. This might allow physically proximate attackers to obtain sensitive...

PT-2011-4455

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Description The issue concerns the UIKit Alerts component, which can be exploited by remote attackers to cause a denial of service, resulting in a device hang. This is achieved by using a long tel: URL that trigge...

PT-2011-4453

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Description The issue is related to the Settings component in Apple iOS, where localization is not properly implemented when a configuration profile is used for a locale other than English. This incorrect...

CVE-2011-3253: Exposure of Sensitive Information to an Unauthorized Actor

CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate...

CVE-2011-3426: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a "Content-Disposition: attachment" HTTP header...