Apple iOS Postscript Type字体处理缓冲区溢出漏洞

Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Jailbreakme 3 PDF 越狱使用Apple iOS操作系统中处理Postscript Type又称Adobe Type 1字体的一个缓冲区溢出漏洞，漏洞存在于t1decoderparsecharstrings函数，该函数用于解码Type 1字体文件中编码过的CharStrings字段。越狱漏洞中使用的字体文件中包含了一个351字节的特殊CharStrings的字段，当该函数处理这个特殊的...

New iPhone Jailbreak Makes Short Work of World's 'Most Secure' OS

It wasn’t long ago – just a month in fact – that Apple’s iOS mobile operating system was being called the ‘Most secure’ OS. Period.’ A few weeks later, and the security of that OS has fallen again to the talents of Comex, an as-yet-unnamed mobile device hacker whose work is attracting kudos from...

Windows Gather Apple iOS MobileSync Backup File Collection

This module will collect sensitive files from any on-disk iOS device backups This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'English' class MetasploitModule 'Windows Gather Apple iOS MobileSync Backup File...

Design/Logic Flaw

The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202...

CVE-2011-0195

The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202...

CVE-2011-0195

The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202...

CVE-2011-0195

Technical details for CVE-2011-0195 are not publicly available in the provided documents. Monitor for updates.

CVE-2011-0195: Exposure of Sensitive Information to an Unauthorized Actor

The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202...

PT-2011-2175

Name of the Vulnerable Software and Affected Versions Apple iOS versions 4.3.0 through 4.3.1 Description The issue allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site, leveraging the generate-id XPath function in libxslt...

Apple iOS < 4.3.2 Multiple Vulnerabilities

Binary data 5888.prm...

CVE-2011-1418

The stateless address autoconfiguration aka SLAAC functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses...

CVE-2011-0159

The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie...

CVE-2011-0157

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

CVE-2011-0158

MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allows remote attackers to cause a denial of service persistent application crash via crafted JavaScript code...

Memory corruption

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

Information disclosure

The stateless address autoconfiguration aka SLAAC functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses...

CVE-2011-0157

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

UBUNTU-CVE-2011-0157

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

Design/Logic Flaw

The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie...

Code injection

MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allows remote attackers to cause a denial of service persistent application crash via crafted JavaScript code...