4800 matches found
Apple iOS < 5.0 Multiple Vulnerabilities
Binary data 6041.prm...
FreeBSD Ports: freetype2
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Apple iOS < 7.0 Multiple Vulnerabilities
Binary data 8013.prm...
EUVD-2011-0254
The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...
PT-2011-2205
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2.10 Apple iOS versions 4.3.x prior to 4.3.5 Description The issue concerns the Data Security component's failure to check the basicConstraints parameter during the validation of X.509 certificate chains. This...
CVE-2011-0228: Improper Input Validation
The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...
Apple iOS "basicConstraints" X.509证书链验证漏洞
CVE ID: CVE-2011-0228 Apple iOS是运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS "basicConstraints" X.509在在实现上存在欺骗漏洞，远程用户可利用此漏洞执行欺骗攻击。 此漏洞源于在验证证书链中的证书"basicConstraints"参数时存在错误，通过中间人攻击，可欺骗任意域中的证书并泄露加密信息。 Apple iOS 4.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...
Apple iOS < 4.2.10 / 4.3.x < 4.3.5 Data Security Certificate Verification
Binary data 5993.prm...
Apple iOS (iOS) security vulnerabilities
Privilege escalation, code execution via PDF documents...
Type confusion
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application...
CVE-2011-0227
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application...
CVE-2011-0227
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application...
CVE-2011-0227
The IOMobileFrameBuffer component in Apple iOS is vulnerable to an invalid type conversion issue within its queueing primitives. This flaw allows a local attacker to run malicious code as a user to gain system privileges via a crafted application. The vulnerability affects iOS before 4.2.9 and iO...
CVE-2011-0226
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...
CVE-2011-0226
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...
CVE-2011-0226
The FreeType font rendering engine is vulnerable to an integer signedness error in psaux/t1decode.c affecting versions prior to 2.4.6 . This flaw allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by processing a crafted Type 1...
VulnCheck KEV: CVE-2011-0226
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted...
CVE-2011-0227: Undefined Security Weakness
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application...
PT-2011-2204
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2.9 Apple iOS versions 4.3.x prior to 4.3.4 Description The issue is related to the queueing primitives in IOMobileFrameBuffer, which do not properly perform type conversion. This allows local users to gain...