CVE-2010-3830

Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allows local users to gain privileges via unspecified vectors...

CVE-2010-3831

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action...

CVE-2010-3828

The vulnerability CVE-2010-3828 affects Apple iOS before 4.2 in iAd Content Display. A crafted URL in an ad can enable man-in-the-middle attackers to make calls, indicating potential traffic manipulation via the ad. From the provided documents, there are no explicit exploitation details or confir...

CVE-2010-3829

CVE-2010-3829 is a WebKit vulnerability described for WebKit in Apple iOS prior to 4.2, where processing of an HTML LINK element with DNS prefetching could bypass the remote image loading setting in Mail. The issue allows remote attackers to bypass access restrictions via a LINK element used for ...

CVE-2010-3830

CVE-2010-3830 : The connected sources confirm a vulnerability in Apple iOS prior to 4.2 where an invalid pointer is accessed during the processing of packet filter rules. This flaw can allow local users to gain privileges via unspecified vectors. The affected product is iOS; the root cause is the...

PT-2010-5108

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2 Description The issue is related to the improper validation of signatures before displaying a configuration profile in the configuration installation utility. This allows remote attackers to spoof profiles via...

PT-2010-5109

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2 Description The issue allows man-in-the-middle attackers to make calls via a crafted URL in an ad, specifically affecting the iAd Content Display in Apple iOS. Recommendations For versions prior to 4.2, update t...

PT-2010-5112

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2 Description The issue allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action, due to the support for HTTP Basic...

CVE-2010-3830: Undefined Security Weakness

Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allows local users to gain privileges via unspecified vectors...

CVE-2010-3828: Undefined Security Weakness

iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad...

CVE-2010-3831: Exposure of Sensitive Information to an Unauthorized Actor

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action...

CVE-2010-3832: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity TMSI field...

CVE-2010-3827: Improper Input Validation

Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors...

CVE-2010-3829: Undefined Security Weakness

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to...

Apple iOS < 4.2 Multiple Vulnerabilities

Binary data 5715.prm...

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation

// source: https://www.securityfocus.com/bid/45010/info // // Apple iOS is prone to a local privilege-escalation vulnerability. // // Local attackers running malicious code can exploit this issue to elevate their privileges. Successful attacks will completely compromise an affected device. // int...

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation

Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation // source: https://www.securityfocus.com/bid/45010/info // // Apple iOS is prone to a local privilege-escalation vulnerability. // // Local attackers running malicious code can exploit this issue to elevate their privileges...

CVE-2010-1815

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving scrollbars...

CVE-2010-1812

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving selections...

CVE-2010-1814

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving form menus...