CVE-2011-0158

MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allows remote attackers to cause a denial of service persistent application crash via crafted JavaScript code...

CVE-2011-0157

CVE-2011-0157 affects WebKit used in Apple iOS prior to 4.3. The underlying issue is memory corruption that can be triggered by a crafted web site, enabling remote code execution or causing an application crash (DoS). Affected component: WebKit on iOS; vulnerability class and trigger are describe...

CVE-2011-0158

Summary of CVE-2011-0158 (Apple iOS/MobileSafari) : The issue affects MobileSafari on iOS prior to 4.3 where launching applications via URL handlers is not implemented correctly. This allows remote attackers to trigger a denial of service through crafted JavaScript, resulting in persistent applic...

CVE-2011-1418

The CVE relates to IPv6 SLAAC on Apple iOS before 4.3 and Apple TV before 4.2, where the MAC address is exposed in the IPv6 address. This allows remote servers to potentially track users via source IPv6 addresses. Root cause: IPv6 SLAAC implementation leaking the MAC into the address. The provide...

CVE-2011-0157

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

CVE-2011-1417

Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a Microsoft Office document with a...

CVE-2011-1417

Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a Microsoft Office document with a...

PT-2011-2144

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.3 Apple TV versions prior to 4.2 Description The issue is related to improper bounds checking for Wi-Fi frames, which can be exploited by remote attackers to cause a denial of service, resulting in a device reset...

PT-2011-2140

Name of the Vulnerable Software and Affected Versions MobileSafari in Apple iOS versions prior to 4.3 Description The issue is related to the improper implementation of application launching through URL handlers in MobileSafari, allowing remote attackers to cause a denial of service by crashing t...

PT-2011-2141

Name of the Vulnerable Software and Affected Versions Safari in Apple iOS versions 4.0 through 4.2 Description The issue is related to the Safari Settings feature in Safari, which does not properly clear cookies during the execution of the Safari application. This might make it easier for remote...

PT-2011-3114

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.3 Apple TV versions prior to 4.2 Description The issue concerns the stateless address autoconfiguration functionality in the IPv6 networking implementation. It allows remote IPv6 servers to track users by logging...

CVE-2011-0159: Improper Input Validation

The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie...

CVE-2011-0157: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1...

CVE-2011-1418: Exposure of Sensitive Information to an Unauthorized Actor

The stateless address autoconfiguration aka SLAAC functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses...

PT-2011-2139

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. Recommendations For Apple iOS...

CVE-2011-0162: Improper Input Validation

Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service device reset via unspecified traffic on the local wireless network...

Apple iOS < 4.3 Multiple Vulnerabilities

Binary data 5814.prm...

CVE-2011-0154

WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort function for JavaScript arrays, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related t...

Veracode Announces Mobile App Verification Service

Application testing firm Veracode said on Wednesday that it was expanding its service to vet the security of mobile applications to cover Apple iPhone and Google Android devices. In a statement, Veracode said it was accepting submissions of mobile applications for testing for all mobile platforms...

Apple iOS Safari - JS . Remote Crash

Apple iOS Safari - JS . Remote Crash Apple iPhone 3 Safari JavaScript - dot / '.' Remote Crash . = '$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...